TI-2024-37135 Aliases CVE-2024-56142 GHSA-m9hc-vxjj-4x6q

Path Traversal in pghoard

LOW 22CWE-22Published 2024-12-17 · Updated 2024-12-18

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Information disclosure
Confidentiality · integrity · availability: Low · None · None
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-22 and the CVSS impact.

Summary

pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. A vulnerability has been discovered that could allow an attacker to acquire disk access with privileges equivalent to those of pghoard, allowing for unintended path traversal. Depending on the permissions/privileges assigned to pghoard, this could allow disclosure of sensitive information. This issue has been addressed in releases after 2.2.2a. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00412 35th percentileScored 2026-11-07

Fix Fixed pghoard (PyPI): 2.6.1-rc

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Aiven-Open	pghoard	up to 2.2.2a	—	No fix listed	CNA
—	pghoard (PyPI)	before 2.6.1-rc	2.6.1-rc	Patch available	GHSA-m9hc-vxjj-4x6q

pghoard VendorAiven-Open Affected up to 2.2.2a Fixed in — No fix listed CNA
pghoard (PyPI) Vendor— Affected before 2.6.1-rc Fixed in 2.6.1-rc Patch available GHSA-m9hc-vxjj-4x6q

Remediation

Fix · GHSA-m9hc-vxjj-4x6q pghoard (PyPI) Fixed in 2.6.1-rc Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2024-56142
2026-10-03 Alias added: GHSA-m9hc-vxjj-4x6q

References

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2024-56142

Other 3

TI-2025-38105 Karapace is vulnerable to Authentication Bypass CVSS 3.1HIGH 8.6
TI-2025-34940 aiven-db-migrate allows Privilege Escalation through use of psql during migration CVSS 3.1CRITICAL 9.1
TI-2025-22661 aiven-extras allows PostgreSQL Privilege Escalation through format function CVSS 3.1CRITICAL 9.1
TI-2025-34939 aiven-db-migrate allows Privilege Escalation via unrestricted search_path during migration CVSS 3.1CRITICAL 9.1
TI-2026-79625 Path traversal in PGHoard restore allows arbitrary file writes CVSS 3.1HIGH 8.4
TI-2023-15599 aiven-extras PostgreSQL Privilege Escalation Through Overloaded Search Path CVSS 3.1HIGH 8.8

See all 15 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences