CVE-2026-54711

UNKNOWN 0.0

PGHoard: Password written to debug log

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.1, when using .pgpass, database connection information including the username and password will be logged at the debug level. This issue has been patched in version 2.7.1.

CWE	CWE-532
Vendor	aiven-open
Product	pghoard
Published	Oct 23, 2026

Stay Ahead of the Next One

Get instant alerts for aiven-open pghoard

Be the first to know when new unknown vulnerabilities affecting aiven-open pghoard are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Aiven-Open / pghoard

< 2.7.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/Aiven-Open/pghoard/security/advisories/GHSA-mpx4-jmpr-vm8v github.com: https://github.com/Aiven-Open/pghoard/releases/tag/2.7.1