CVE-2026-55769 | cloudnative-pg CloudNativePG up to 1.28.3/1.29.1 Pool Profiles profiles.go fillDefaultParameters privileges management

August 21, 2026 Yanac

A vulnerability was found in cloudnative-pg CloudNativePG up to 1.28.3/1.29.1. It has been declared as problematic. This issue affects the function fillDefaultParameters of the file pkg/management/postgres/pool/profiles.go of the component Pool Profiles. Such manipulation leads to improper privilege management.

This vulnerability is referenced as CVE-2026-55769. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More