Description
privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges
Published: 2026-08-23
Score: 9.9 Critical
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

Vendor Solution

Upgrade to version 1.19.0

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 23 Aug 2026 09:30:00 +0000

Type Values Removed Values Added
Description privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges
Title Untrusted Search Path in StackGres
Weaknesses CWE-426
References
Metrics cvssV3_1

{'score': 9.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: GitLab

Published:

Updated: 2026-08-23T09:26:46.103Z

Reserved: 2026-08-23T09:26:41.364Z

Link: CVE-2026-78155

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses