Vulnerability Description
pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.1, when using .pgpass, database connection information including the username and password will be logged at the debug level. This issue has been patched in version 2.7.1.
Related Weaknesses (CWE)
References
- https://github.com/Aiven-Open/pghoard/releases/tag/2.7.1
- https://github.com/Aiven-Open/pghoard/security/advisories/GHSA-mpx4-jmpr-vm8v
FAQ
What is CVE-2026-54711?
CVE-2026-54711 is a documented vulnerability. pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.1, when using .pgpass, database connection information including the user...
How severe is CVE-2026-54711?
CVSS scoring is not yet available for CVE-2026-54711. Check NVD for updates.
Is there a patch for CVE-2026-54711?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.