PT-2026-95651 · Unknown · Pg Partman
CVE-2026-61822
·
Published
2026-09-18
·
Updated
2026-09-23
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
pg partman versions prior to 5.5.0
Description
The
run maintenance() function handles exceptions outside the loop that processes rows from part config. Consequently, an exception triggered by one partition set terminates the loop immediately, skipping all subsequent sets. A user with partman user access can exploit this by inserting or updating a row with a low maintenance order value that causes a failure. This ensures the process aborts before legitimate partition sets are maintained, leading to a database-wide loss of automated partition maintenance.Recommendations
Update to version 5.5.0.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Pg Partman