What is the CVSS score of EUVD-2026-64648?

EUVD-2026-64648 has a CVSS 3.1 base score of 9.9 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.5%.

Which versions of StackGres are affected by EUVD-2026-64648?

The OnGres StackGres operator, a Kubernetes-based PostgreSQL platform managing multi-tenant database deployments, contains a critical privilege escalation vulnerability (CVSS 9.9) allowing any…

How to fix or mitigate EUVD-2026-64648?

Within 24 hours, identify all StackGres operator instances running in Kubernetes environments and classify which are multi-tenant deployments with external or untrusted tenants. Immediately implement least-privilege database user policies by removing administrative capabilities from all tenant-controlled accounts and restrict access to administrative interfaces. Within 7 days, deploy comprehensive monitoring and alerting for privilege escalation attempts targeting the StackGres operator, conduct a complete RBAC audit to minimize tenant account permissions, and implement network segmentation isolating tenant workloads from administrative planes. Within 30 days, establish continuous vendor monitoring of OnGres advisories and maintain readiness to upgrade immediately upon patched release; in parallel, evaluate interim mitigations such as segregating high-risk external tenants into dedicated single-tenant StackGres instances or evaluating alternative PostgreSQL platforms with stronger multi-tenant isolation guarantees.

StackGres EUVD-2026-64648

| CVE-2026-78155 CRITICAL

Untrusted Search Path (CWE-426)

2026-08-23 GitLab

GHSA-gf36-c938-gjrw

Privilege Escalation Stackgres

9.9

CVSS 3.1 · Vendor: GitLab

Severity by source

Vendor (GitLab) PRIMARY

9.9 CRITICAL

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

vuln.today AI

9.9 CRITICAL

Authenticated tenant (PR:L) reaches operator over network (AV:N) with low complexity, crossing a trust boundary (S:C) to gain full administrative CIA impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (GitLab).

CVSS VectorVendor: GitLab

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 23, 2026 - 09:45 vuln.today

CVE Published

Aug 23, 2026 - 09:26 cve.org

CRITICAL 9.9

DescriptionCVE.org

privilege escalation in StackGres operator allows a low-privilege tenant who owns a database to gain administrator privileges

AnalysisAI

Privilege escalation in the OnGres StackGres operator lets a low-privilege, database-owning tenant elevate to administrator privileges, breaking the multi-tenant isolation model of this Kubernetes-based PostgreSQL platform. The CVSS 9.9 rating with a scope change (S:C) reflects that an authenticated tenant confined to their own database can cross a trust boundary to gain full administrative control. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Authenticate as low-privilege tenant owning a database

Exploit

Invoke operator action across trust boundary

Execution

Escalate to administrator privileges

Impact

Control operator and all tenant databases

Access

Authenticate as low-privilege tenant owning a database

Exploit

Invoke operator action across trust boundary

Execution

Escalate to administrator privileges

Impact

Control operator and all tenant databases

Vulnerability AssessmentAI

Exploitation	Exploitation requires the attacker to already hold a low-privilege tenant account that owns a database managed by the StackGres operator (PR:L, authenticated) and network reachability to the operator/API (AV:N); no user interaction and no elevated privileges beyond database ownership are needed (AC:L, UI:N). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	Signals are mostly aligned toward high priority but incomplete. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	A malicious or compromised tenant who legitimately owns a database within a shared StackGres deployment abuses the operator's flawed privilege handling to escalate from database-owner to platform administrator. With administrator control the attacker can read, alter, or destroy other tenants' databases and manipulate the operator itself. …
Remediation	No vendor-released patch version is identified at time of analysis - the only reference is a GitLab work item (https://gitlab.com/ongresinc/stackgres/-/work_items/3177) tracking the issue, not a tagged fixed release, so administrators should monitor that item and the StackGres release notes for a patched version and upgrade to it as soon as it is published. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, identify all StackGres operator instances running in Kubernetes environments and classify which are multi-tenant deployments with external or untrusted tenants. …

Threat intelligence, references, and detailed analysis are available after sign-in.