Privilege Escalation in StackGres Operator Affects On-Premise Database Management
CVE-2026-78155

9.9CRITICAL

Key Information:

Vendor

Ongres

Status
Stackgres
Vendor
CVE Published:
23 August 2026

What is CVE-2026-78155?

The StackGres operator contains a vulnerability that allows low-privilege tenants who manage a database to escalate their privileges, potentially gaining administrator access. This flaw poses a significant risk to database security, enabling unauthorized users to manipulate and control sensitive database operations.

Affected Version(s)

StackGres 0 <= 1.18.8

References

https://gitlab.com/ongresinc/stackgres/-/work_items/3177

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

https://gitlab.com/cipher5
.