Mikhail Shytsko: Your Agent Is Reading Someone Else's Tenant

T2Covered by 1 source · first reported by Planet PostgreSQL at 18 Sept, 00:00 UTC

Two client connections, opened one after the other through PgBouncer transaction mode, asked the same database whose rows they were allowed to see, and the second one got the first one's answer. It had set nothing, it had never met the first caller, and the rows it read belonged to that caller's…

cloud

Sources

• T2Mikhail Shytsko: Your Agent Is Reading Someone Else's TenantPlanet PostgreSQL18 Sept, 00:00