CloudNative-PG v1.29.2 Security Bulletin: CVE-2026-55769 (RCE) & CVE-2026-55765 Fix

Vulnerability Overview Two critical security vulnerabilities have been identified in CloudNative-PG version 1.29.2: 1. CVE-2026-55769: An issue with in operator-issued connections. 2. CVE-2026-55765: An issue with operator-side SCRAM-SHA-256 password encoding. Scope of Impact CVE-2026-55769 Affected Component: Operator introspection probes running on within the public schema. Specific Impact: These probes run with cluster superuser privileges, leveraging a privilege escalation vulnerability in (identical to CVE-2018-1058). This could potentially lead to Remote Code Execution (RCE) within the pod via . Remediation: The operator now sets and ignores it for all connections, accepting tenant-controlled defaults in startup messages. CVE-2026-55765 Affected Component: Operator-side SCRAM-SHA-256 password encoding. Specific Impact: The operator now performs SCRAM-SHA-256 encoding of clear-text role passwords before issuing . Literal PostgreSQL parsing (as well as extensions like or password capturing) receives the SCRAM verifier instead of the clear-text secret. Pre-hashed values (MD5 or SCRAM) remain unchanged. An opt-out is available via the Secret annotation . Remediation CVE-2026-55769 Remediation: The operator now sets and ignores it for all connections, accepting tenant-controlled defaults in startup messages. CVE-2026-55765 Remediation: The operator now performs SCRAM-SHA-256 encoding of clear-text role passwords before issuing . Literal PostgreSQL parsing (as well as extensions like or password capturing) receives the SCRAM verifier instead of the clear-text secret. Pre-hashed values (MD5 or SCRAM) remain unchanged. An opt-out is available via the Secret annotation . Code Samples No specific POC code or exploit code was included in the page. Summary CloudNative-PG version 1.29.2 fixes two critical security vulnerabilities involving and SCRAM-SHA-256 password encoding issues. These vulnerabilities could lead to Remote Code Execution and password leakage. The remediation measures include configuring and ignoring a specific and performing SCRAM-SHA-256 encoding on clear-text passwords.

Goal Reached Thanks to every supporter — we hit 100%!

CloudNative-PG v1.29.2 Security Bulletin: CVE-2026-55769 (RCE) & CVE-2026-55765 Fix

More from this source