01 Record

CVE-2026-55765

CloudNativePG: Cleartext role passwords recorded in pg_stat_statements allow privileged tenant roles to recover the PostgreSQL superuser credential and achieve RCE in the database pod

HighPUBLISHEDCNA: GitHub_M

Base score8.5 CVSS v3.xCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

View raw JSON CVE Program record

02 Description

CloudNativePG: Cleartext role passwords recorded in pg_stat_statements allow privileged tenant roles to recover the PostgreSQL superuser credential and achieve RCE in the database pod

03 Metadata

Published

2026-08-20 21:38Z1 DAY AGO

Last updated

2026-08-20 21:38Z1 DAY AGO

Reserved

2026-06-17

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

High (CVSS 8.5)

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-256Plaintext Storage of a PasswordBase
CWE-522Insufficiently Protected CredentialsClass

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

19763502f7ea3cb3a7628a2abafd9586e15925137c8a96ad091bb2af1d2b0442

04 Affected products

VendorProductVersionsPlatforms

cloudnative-pgcloudnative-pg< 1.28.4, >= 1.29.0, < 1.29.2—

05 References

github.comhttps://github.com/cloudnative-pg/cloudnative-pg/security/advisories/GHSA-w3gf-xc94-wvmjx_refsource_CONFIRM
github.comhttps://github.com/cloudnative-pg/cloudnative-pg/pull/10724x_refsource_MISC
github.comhttps://github.com/cloudnative-pg/cloudnative-pg/commit/2f0342747e1f160425b9d51753c0069b0d6117d5x_refsource_MISC
github.comhttps://github.com/cloudnative-pg/cloudnative-pg/commit/3cd5af5d388c26758acf13c19ea806b4bcebb3fex_refsource_MISC
github.comhttps://github.com/cloudnative-pg/cloudnative-pg/commit/9a13573dbe3d78721b7ea92141e6d2324a2c0ef0x_refsource_MISC
github.comhttps://github.com/cloudnative-pg/cloudnative-pg/releases/tag/v1.28.4x_refsource_MISC
github.comhttps://github.com/cloudnative-pg/cloudnative-pg/releases/tag/v1.29.2x_refsource_MISC
github.comhttps://github.com/cloudnative-pg/cloudnative-pg/releases/tag/v1.30.0x_refsource_MISC