Ccloudnative-pg

Products

Exploited and recent CVEs

• CVE-2026-55769 Critical 9.4 CloudNativePG: Overriding operators can lead to privilege escalation in CloudNativePG for SQL queries without a fixed `search_path` 0.8%
• CVE-2026-55765 High 8.5 CloudNativePG: Cleartext role passwords recorded in pg_stat_statements allow privileged tenant roles to recover the PostgreSQL superuser credential and achieve RCE in the database pod 0.5%
• CVE-2026-44477 High 8.8 CloudNativePG: Metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE 0.5%