CVE-2026-104947: CWE-862 Missing Authorization in EnterpriseDB WarehousePG

CVE-2026-104947 describes a missing authorization vulnerability in EnterpriseDB's WarehousePG product affecting versions 7.2.1 through 7.6.0. The vulnerability exists in the built-in function gp_log_backend_memory_contexts(), which can be executed by any authenticated database role without requiring explicit GRANT permissions. This function circumvents PostgreSQL's superuser restrictions on the underlying pg_log_backend_memory_contexts() function. Exploitation allows a low-privileged user to force segment backends of other sessions, including those with superuser privileges, to write their memory context details to segment server logs. These logs may include sensitive information such as query text from other users' cached plans. The function can be invoked repeatedly to generate large volumes of log output. Versions 6.x of WarehousePG are not affected by this issue.

The vulnerability allows low-privileged authenticated users to cause other database sessions, including superuser sessions, to write memory context details to logs. These logs may contain sensitive query text from other users' cached plans, potentially exposing confidential information. However, the attacker cannot read the logs directly. The vulnerability has a CVSS 4.0 base score of 5.3, indicating a medium severity impact with network attack vector, low attack complexity, and low privileges required.

No explicit patch or remediation details are provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict authenticated database roles to trusted users only and monitor for unusual use of the gp_log_backend_memory_contexts() function. Avoid granting unnecessary database roles to untrusted users.