Description
privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OnGres | StackGres | ≤ 1.18.8 | — |
Critical · 9.9
CVE-2026-78155
EUVD-2026-64648GHSA-gf36-c938-gjrw
Untrusted Search Path in StackGres
Published Aug 23, 2026 · Updated Aug 24, 2026 · Assigned by GitLab