CVE-2026-78155 PUBLISHED

Untrusted Search Path in StackGres

Assigner: GitLab
Reserved: 23.08.2026 Published: 23.08.2026 Updated: 23.08.2026

privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Score: 9.9

Product Status

Vendor OnGres
Product StackGres
Versions Default: unaffected
  • affected from 0 to 1.18.8 (incl.)

Solutions

Upgrade to version 1.19.0

Credits

  • https://gitlab.com/cipher5 finder

References

Problem Types

  • CWE-426: Untrusted Search Path CWE