CVE Catalog

CVE-2026-78155

CriticalCVSS 9.9
Published: Translated: NVD NIST

Summary

A privilege escalation vulnerability in the StackGres operator allows a low-privileged tenant who owns a database to gain administrator privileges.

Risk Assessment

Unauthorized access to administrative functions could lead to full compromise of the database cluster and data confidentiality breach.

Recommendation

Apply available security updates for StackGres and restrict database user privileges to the minimum necessary.

Original NVD description (English source)

privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges

Vulnerability data from NVD (NIST) · CISA KEV · EPSS