cloudnative-pg vulnerabilities
3 published CVEs name cloudnative-pg among the affected products.
- 3Published CVEs3 of them scored
- 3Last 12 monthspublished in the last year
- 2Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-55769
CloudNativePG: Overriding operators can lead to privilege escalation in CloudNativePG for SQL queries without a fixed `search_path`
cloudnative-pg · cloudnative-pg
Critical9.4 - CVE-2026-55765
CloudNativePG: Cleartext role passwords recorded in pg_stat_statements allow privileged tenant roles to recover the PostgreSQL superuser credential and achieve RCE in the database pod
cloudnative-pg · cloudnative-pg
High8.5 - CVE-2026-44477
CloudNativePG: Metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE
cloudnative-pg · cloudnative-pg
Critical9.4