Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-61822— pg_partman disable maintenance for all partition sets

Quick assessment

Affected
pgpartman pg_partman
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

是一个 PostgreSQL 扩展，用于按时间或 ID 管理分区表。在 5.5.0 版本之前， 函数将异常处理置于处理 表行数据的循环外部，这意味着任意一个分区集发生的异常会立即终止整个循环，并跳过后续所有分区集。拥有 权限的角色可以插入或更新一条必然失败的数据记录，并为其设置较低的 值，使其在合法记录之前被处理。随后每次维护周期都会提前中止，导致所有合法的分区集无法得到维护，从而造成数据库范围内自动化分区维护的全面失效。该问题已在 5.5.0 版本中修复。

CVSS 6.5 · Medium

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service

Affected Version Matrix 1

VendorProduct Version RangeStatus
pgpartman pg_partman < 5.5.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-61822

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
pg_partman disable maintenance for all partition sets
Source: CVE Program / CVE List V5
Vulnerability Description
pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, run_maintenance() handles exceptions outside the loop that processes rows from part_config, so an exception for one partition set immediately terminates the loop and skips every later set. A role with partman_user access can insert or update a row that reliably fails and assign it a low maintenance_order value so it is processed before legitimate rows. Repeated maintenance ticks then abort before legitimate partition sets are maintained, causing database-wide loss of automated partition maintenance. This issue is fixed in version 5.5.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对异常条件检查或处理不恰当
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
pgpartman pg_partman < 5.5.0 -

II. Public POCs for CVE-2026-61822

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-61822

请登录查看更多情报信息。

Other References for CVE-2026-61822 (2)

Same Patch Batch · pgpartman · 2026-09-18 · 7 CVEs total

CVE-2026-61781 9.9 CRITICAL pg_partman has privilege escalation through SQL injection in create_partition_time()
CVE-2026-61820 8.5 HIGH pg_partman privilege escalation via SQL injection when inheriting template properties
CVE-2026-61817 8.5 HIGH pg_partman privilege escalation via SQL injection in several functions via time decoder
CVE-2026-61818 8.5 HIGH pg_partman SQL injection in undo partition time encoder
CVE-2026-61819 8.5 HIGH pg_partman privilege escalation via SQL injection in when using pg_jobmon and encountering
CVE-2026-61821 8.5 HIGH pg_partman authorization bypass to move child tables between schemas during retention

IV. Related Vulnerabilities

Same product: pg_partman
Same vendor: pgpartman
Same weakness: CWE-703

V. Comments for CVE-2026-61822

No comments yet

Leave a comment