What’s Vulnerable › Products

cloudnative-pg vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your cloudnative-pg version is affected

Latest cloudnative-pg vulnerabilities

• CVE-2026-55769 — CloudNativePG: Overriding operators can lead to privilege escalation in CloudNativePG for SQL queries without a fixed `search_path` (CVSS 9.4)
• CVE-2026-55765 — CloudNativePG: Cleartext role passwords recorded in pg_stat_statements allow privileged tenant roles to recover the PostgreSQL superuser credential and achieve RCE in the database pod (CVSS 8.5)