PT-2026-95651 · Unknown · Pg Partman

CVE-2026-61822

·

Published

2026-09-18

·

Updated

2026-09-23

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0
Description The run maintenance() function handles exceptions outside the loop that processes rows from part config. Consequently, an exception triggered by one partition set terminates the loop immediately, skipping all subsequent sets. A user with partman user access can exploit this by inserting or updating a row with a low maintenance order value that causes a failure. This ensures the process aborts before legitimate partition sets are maintained, leading to a database-wide loss of automated partition maintenance.
Recommendations Update to version 5.5.0.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-61822
ECHO-AE46-A998-E223
GHSA-9M6C-HW23-C6H2

Affected Products

Pg Partman