cloudnative-pg — Vulnerabilities & Security Advisories 3

All 3 CVE vulnerabilities found in cloudnative-pg, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-55769	CloudNativePG: Overriding operators can lead to privilege escalation in CloudNativePG for SQL queries without a fixed `search_path` CWE-426	9.4	Critical	2026-08-20
CVE-2026-55765	CloudNativePG: Cleartext role passwords recorded in pg_stat_statements allow privileged tenant roles to recover the PostgreSQL superuser credential and achieve RCE in the database pod CWE-256	8.5	High	2026-08-20
CVE-2026-44477	CloudNativePG: Metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE CWE-250	-	-	2026-05-28

All 3 known CVE vulnerabilities affecting cloudnative-pg with full Chinese analysis, references, and POCs where available.