CVE-2026-104055

— UNSCOREDpublic exploit available

Published 2026-10-02 · Updated 2026-10-06

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

The postgresql-operator charm runs a Prometheus postgres_exporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exporter writes the monitoring user's password in cleartext to its logs. Any actor able to read those logs can recover the password, which grants read-only pg_monitor access to PostgreSQL. This is fixed in the dev track (14/edge) in revisions 1189 (arm64) and 1190 (amd64), and in the stable track (14/stable) in revisions 1216 (arm64) and 1217 (amd64).

Weaknesses

CWE-532

Public exploit & PoC references

https://github.com/canonical/charmed-postgresql-snap/pull/305
https://github.com/canonical/charmed-postgresql-snap/pull/307
https://github.com/canonical/postgresql-operator/pull/1863
https://github.com/canonical/postgresql-operator/security/advisories/GHSA-rcx7-7rh5-r542

All references

https://github.com/canonical/charmed-postgresql-snap/pull/305
https://github.com/canonical/charmed-postgresql-snap/pull/307
https://github.com/canonical/postgresql-operator/pull/1863
https://github.com/canonical/postgresql-operator/security/advisories/GHSA-rcx7-7rh5-r542

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2023-54407PoC
HIGHCVE-2025-71423PoC
HIGHCVE-2025-71425PoC
MEDIUMCVE-2026-101168
HIGHCVE-2026-103371
MEDIUMCVE-2026-104872PoC
MEDIUMCVE-2026-106035
MEDIUMCVE-2026-106499PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.