# postgresql-security

Published articles for postgresql-security.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Frozen Privilege: Remote Code Execution in Snowflake-Managed PostgreSQL

DevFeed: [Frozen Privilege: Remote Code Execution in Snowflake-Managed PostgreSQL](<https://devfeed.tech/articles/frozen-privilege-remote-code-execution-in-snowflake-managed-postgresql-93925.md>)

Original publisher: [Read original article](<https://hackernoon.com/frozen-privilege-remote-code-execution-in-snowflake-managed-postgresql?source=rss>)

Author: Varonis

Published: 2026-10-21T21:10:55Z

Content type: news

Language: en

Sources: [HackerNoon](<https://devfeed.tech/sources/hackernoon.md>)

Topics: [PostgreSQL](<https://devfeed.tech/topics/postgresql.md>), [self-hosted databases vs managed services](<https://devfeed.tech/topics/self-hosted-databases-vs-managed-services.md>), [identity and access management](<https://devfeed.tech/topics/identity-and-access-management.md>)

Tags: [cloud-database-security](<https://devfeed.tech/tags/cloud-database-security.md>), [code-execution](<https://devfeed.tech/tags/code-execution.md>), [database](<https://devfeed.tech/tags/database.md>), [features](<https://devfeed.tech/tags/features.md>), [good-company](<https://devfeed.tech/tags/good-company.md>), [managed](<https://devfeed.tech/tags/managed.md>), [managed-database-security](<https://devfeed.tech/tags/managed-database-security.md>), [os](<https://devfeed.tech/tags/os.md>), [pg-cron-privilege-escalation](<https://devfeed.tech/tags/pg-cron-privilege-escalation.md>), [postgresql](<https://devfeed.tech/tags/postgresql.md>), [postgresql-security](<https://devfeed.tech/tags/postgresql-security.md>), [postgresql-vulnerability](<https://devfeed.tech/tags/postgresql-vulnerability.md>), [privilege-escalation](<https://devfeed.tech/tags/privilege-escalation.md>), [rce](<https://devfeed.tech/tags/rce.md>), [remote-code-execution](<https://devfeed.tech/tags/remote-code-execution.md>), [snowflake](<https://devfeed.tech/tags/snowflake.md>), [varonis](<https://devfeed.tech/tags/varonis.md>), [varonis-threat-labs](<https://devfeed.tech/tags/varonis-threat-labs.md>)

### AI overview

Varonis reports that a Snowflake-managed PostgreSQL role with CREATEROLE could escalate to OS-level command execution by self-granting data-access roles, altering pg_cron jobs to run as postgres, rebinding blocked file functions through LANGUAGE internal, and writing archive_command into configuration. The chain could enable file tampering, recovery sabotage, destruction, and on-host log concealment outside normal SQL auditing. Snowflake remediated the issue server-side; customers need no further action for this flaw. The text recommends least-privilege roles and monitoring for managed customers, and tighter CREATEROLE, pg_cron, function creation, configuration-file, and host controls for teams operating PostgreSQL themselves.

### Source excerpt

Varonis uncovered an RCE chain in Snowflake-managed PostgreSQL, showing how database privileges and legitimate features could lead to OS-level access.