Skip to content
OpenAdvisories

Vendor

cloudnative-pg

3 known vulnerabilities.

Products

cloudnative-pg 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-55769

    CloudNativePG: Overriding operators can lead to privilege escalation in CloudNativePG for SQL queries without a fixed `search_path`

    CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and 1.29.2, CloudNativePG opened superuser connections without pinning search_path in fillDefaultParameters in pkg/management/postgres/pool/pro…

    cloudnative-pg cloudnative-pg
  • Critical 9.4
    CVE-2026-44477

    CloudNativePG: Metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE

    CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.29.1 and 1.28.3, the CloudNativePG metrics exporter opens its PostgreSQL connection as the postgres superuser via the pod-local Unix socket, then de…

    cloudnative-pg cloudnative-pg github.com/cloudnative-pg/cloudnative-pg Go