CVE-2026-104948: WarehousePG 6.27.1 to before 6.27.7, 7.2.1 to before 7.6.1

Affected technology

WarehousePG · 6.27.1 to before 6.27.7, 7.2.1 to before 7.6.1
EnterpriseDB

Description’s affected range: through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in the built-in cluster expansion functions gp_expand_lock_catalog() and gp_expand_bump_version()

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

A low-privileged user can call gp_expand_lock_catalog() inside an open transaction to block all catalog changes across the cluster for every user, superusers included, until that transaction ends, which in practice requires a superuser to terminate the session. Source advisory’s CVSS 4.0 assessment (base score 7.1/10) rates confidentiality and integrity impact as none; availability impact as high.