CVE-2026-104949: WarehousePG 6.27.1 to before 6.27.7, 7.2.1 to before 7.6.1

Affected technology

WarehousePG · 6.27.1 to before 6.27.7, 7.2.1 to before 7.6.1
EnterpriseDB

Description’s affected range: through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in gp_add_coordinator_standby()

Component: Not specified by the source
Function: is

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 4.0 assessment (base score 2.3/10) rates confidentiality impact as none; integrity and availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.