01 Record

CVE-2026-55769

CloudNativePG: Overriding operators can lead to privilege escalation in CloudNativePG for SQL queries without a fixed `search_path`

CriticalPUBLISHEDCNA: GitHub_M

Base score9.4 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

02 Description

CloudNativePG: Overriding operators can lead to privilege escalation in CloudNativePG for SQL queries without a fixed `search_path`

Published

2026-08-20 21:41Z1 DAY AGO

Last updated

2026-08-21 11:20Z14 HR AGO

Reserved

2026-06-17

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

Critical (CVSS 9.4)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Weaknesses

SSVC decision

ExploitationpocAutomatablenoTechnical Impacttotal

Data version

5.2

Document digest

4d46f228a7ee45d1a6fdf18a93621485e82187edbfa0c7ace7102543e78fcea6

VendorProductVersionsPlatforms

cloudnative-pgcloudnative-pg< 1.28.4, >= 1.29.0, < 1.29.2—