CVE-2026-61817

Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0

Description The extension manages partitioned tables by time or ID. The functions run maintenance(), show partitions(), show partition info(), undo partition(), and partition data time() interpolate the writable part config.time dncoder text value into dynamic SQL without identifier quoting. A user with partman user privileges can inject SQL into this value. When an affected operation or the pg partman bgw maintenance process for a text- or UUID-keyed set uses this poisoned value, the SQL executes with the privileges of the operation, which may be the PostgreSQL superuser background-worker role. This can lead to database-wide compromise and operating-system command execution as the PostgreSQL service account.

Recommendations Update to version 5.5.0.