Skip to content
OpenAdvisories

Product · Canonical

postgresql-operator

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-104055

    Monitoring-user password logged in cleartext by postgres_exporter in postgresql VM charm

    The postgresql-operator charm runs a Prometheus postgres_exporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor…

    Canonical postgresql-operator