CVE-2026-111439 openGauss-server CVE debrief

Who should care

Defenders and administrators of openGauss-server deployments should assess exposure and prioritize patching or compensating controls, especially for versions 3.0.0 to 6.0.0. Operators, platform managers, vulnerability management teams, and security teams need to review the vulnerability's impact on their environments and take appropriate actions to mitigate potential risks.

Why it matters

The vulnerability in pg_read_binary_file_blocks() function in openGauss-server allows ordinary users to read relation file blocks without required permissions, potentially leading to unauthorized data access.

• Verify exposure in openGauss-server deployments
• Assess effectiveness of existing compensating controls
• Prioritize patching or upgrades for affected versions

Technical summary

The pg_read_binary_file_blocks() function in openGauss-server has a permission check flaw. Ordinary users can read relation file blocks without required SELECT permissions. The function only checks startBlockNum and blockCount ranges but lacks a check for caller database permissions like SELECT. This allows users to read table data blocks if they can obtain the target table's relation file path via functions like pg_relation_filepath(). The issue affects all versions between 3.0.0 and 6.0.0 and is fixed in 7.0.0-LTS.

Defensive priority

Defenders should prioritize verifying exposure in openGauss-server deployments, especially for versions 3.0.0 to 6.0.0, and assess the effectiveness of existing compensating controls.

Recommended defensive actions

• Verify openGauss-server version and apply patches if necessary
• Restrict access to sensitive data and relations
• Monitor database activity for suspicious queries
• Review compensating controls for exposed systems
• Check relevant monitoring, detection, and logs for exposed assets
• Track exceptions and retest remediated assets
• Confirm whether affected product deployments exist in managed environments

Evidence notes

The CVE record and source item provide details on the vulnerability in pg_read_binary_file_blocks() function in openGauss-server, which allows ordinary users to read relation file blocks without required permissions.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.