CloudNativePG's metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE in github.com/cloudnative-pg/cloudnative-pg
CloudNativePG's metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE in github.com/cloudnative-pg/cloudnative-pg
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-44477US | critical9.9 | — | ||
CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.29.1 and 1.28.3, the CloudNativePG metrics exporter opens its Postgre… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/cloudnative-pg/cloudnative-pg/pull/10576FIX
- https://github.com/cloudnative-pg/cloudnative-pg/releases/tag/v1.28.3WEB
- https://github.com/cloudnative-pg/cloudnative-pg/releases/tag/v1.29.1WEB
- https://github.com/cloudnative-pg/cloudnative-pg/security/advisories/GHSA-423p-g724-fr39ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2026-44477ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan