1. CloudNativePG 1.29.1 Patches Critical Privilege Escalation Flaw CVE-2026-44477
A serious security vulnerability in CloudNativePG allowed low-privilege database users to escalate to PostgreSQL superuser status through the metrics exporter component. The flaw, tracked as CVE-2026-44477 and designated GHSA-423p-g724-fr39, has been patched in version 1.29.1, released May 8, 2026. The vulnerability ex...