CVE-2026-78155

Received
Published: 23 Aug 2026, 09:26
Last modified:23 Aug 2026, 09:26

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.9 CRITICAL
v3.1 (cve.org)
EPSS Score
0.48% LOW
0% probability
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

23 Aug 2026, 09:26
Published
Vulnerability first disclosed

Description

privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges

CVSS Metrics

  • v3.1•CRITICAL•Score: 9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS Trends

Current EPSS score: 0.48%• Percentile: 40%

Techniques & Countermeasures

  • CWE-426•Untrusted Search Path

    The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

Affected Systems

  • ongres•stackgres

    ≤ 1.18.8

References (1)