cloudnative-pg Schwachstellen (CVE)

Für cloudnative-pg veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

3 Ergebnisse

9.4Kritisch

CVE-2026-55769 vor 2 Monaten

CloudNativePG: Overriding operators can lead to privilege escalation in CloudNativePG for SQL queries without a fixed `search_path`

cloudnative-pg cloudnative-pg

CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and 1.29.2, CloudNativePG opened superuser connections without pinning search_path in fillDefaultParameters in pkg/management/postgres/pool/pro…

8.5Hoch

CVE-2026-55765 vor 2 Monaten

CloudNativePG: Cleartext role passwords recorded in pg_stat_statements allow privileged tenant roles to recover the PostgreSQL superuser credential and achieve RCE in the database pod

cloudnative-pg cloudnative-pg

CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and 1.29.2, CloudNativePG embedded cleartext role passwords in `ALTER ROLE` and `CREATE ROLE` statements generated by SetUserPassword in pkg/ma…

9.4Kritisch

CVE-2026-44477 vor 5 Monaten

CloudNativePG: Metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE

cloudnative-pg cloudnative-pg; Red Hat Red Hat Openshift Data Foundation 4

CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.29.1 and 1.28.3, the CloudNativePG metrics exporter opens its PostgreSQL connection as the postgres superuser via the pod-local Unix socket, then de…