SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-78155

CRITICAL · CVSS 9.9 EPSS 0.27%

Source: NVD + CISA KEV + EPSS · Published 2026-08-23 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A critical privilege escalation vulnerability exists in the StackGres operator, enabling low-privilege tenants with database ownership to elevate their permissions to administrator level. This flaw poses significant risks to data integrity and security, as it allows unauthorized access and control over the database environment. Organizations utilizing StackGres should prioritize immediate remediation to safeguard against potential exploitation.

CVE
CVE-2026-78155
Severity
CRITICAL
CVSS
9.9
EPSS
0.27%

Original NVD Description

privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges