https://hackingpassion.com/tags/postgresql/Recent content in PostgreSQL on HackingPassion.com : root@HackingPassion.com-[~]HugoenMon, 07 Sep 2026 13:45:15 +0200https://hackingpassion.com/postgresql-logical-decoding-replication-takeover/Mon, 07 Sep 2026 13:45:15 +0200https://hackingpassion.com/postgresql-logical-decoding-replication-takeover/<p><strong>A database account that was only allowed to copy data could run commands on the server itself. The admins never gave it that right. The hole has been open since PostgreSQL 9.4 shipped in 2014, twelve years.</strong></p> <p>That account has one job. It has no rights on your tables and it cannot create or drop anything. It gets permission to follow along with what changes in the database, because a backup tool or a standby server has to know what happened. In PostgreSQL that permission is called <code>REPLICATION</code>.</p>