An implementation flaw in openGauss-server’s pg_read_binary_file_blocks function allows a database user who can derive the underlying table file path to read binary blocks of any relation without the corresponding SELECT privilege. The missing permission check means a regular user can retrieve sensitive table data, compromising confidentiality. The weakness is an access‑control flaw (CWE‑862).

Vulnerable versions of openGauss‑server range from 3.0.0 up through 6.0.0, including any patch releases within that range. The issue is resolved in 7.0.0‑LTS.

The CVSS score of 4.3 indicates low‑moderate severity. The vulnerability can be exploited only from within a database session, requiring the attacker to have the ability to call the function and to obtain a file path via pg_relation_filepath or similar. No remote exploit is described and EPSS is not available. The vulnerability is not listed in the CISA KEV catalog. Because the exploit path relies on legitimate database functions, an attacker needs only a normal database connection; thus the attack vector is local database. Patching fixes the missing permission check.