The vulnerability in the StackGres operator is caused by an untrusted search path, allowing a low‑privilege tenant who owns a database to gain administrator privileges. This flaw can lead to complete control over the cluster, posing a high risk of data tampering, service disruption, and further lateral movement within the environment.

The affected product is the StackGres operator developed by OnGres. All releases prior to the recommended update to version 1.19.0 are potentially vulnerable, as the untrusted search path issue is not present in the patched release.

The CVSS score of 9.9 indicates a critical severity. Although the EPSS score is not publicly available, the lack of CISA KEV listing does not reduce the risk for environments that rely on the unpatched operator. The likely attack vector is local to users who own a database but can escape tenant boundaries by abusing the operator’s privileged execution context. Given the high severity and the fact that the flaw can be triggered with ordinary tenant privileges, the vulnerability poses an immediate threat.