CVE-2026-104055: CWE-532 Insertion of sensitive information into log file in Canonical postgresql-operator
CVE-2026-104055 is a vulnerability in Canonical's postgresql-operator charm where the Prometheus postgres_exporter logs the monitoring user's password in cleartext upon database connection errors. This password exposure allows any actor with log access to obtain read-only pg_monitor privileges on PostgreSQL. The issue is fixed in specific revisions of the dev and stable tracks.
AI Analysis
Technical Summary
The postgresql-operator charm by Canonical runs a Prometheus postgres_exporter that uses a dedicated monitoring PostgreSQL user to collect database metrics. When database connection errors occur, the exporter improperly logs the monitoring user's password in cleartext. This exposure can lead to unauthorized access to PostgreSQL with read-only monitoring privileges. The vulnerability is identified as CWE-532 (Insertion of sensitive information into log file). Fixes have been applied in revisions 1189 and 1190 for the dev track (14/edge) and revisions 1216 and 1217 for the stable track (14/stable).
Potential Impact
An attacker who can read the exporter logs can recover the monitoring user's password, granting them read-only pg_monitor access to the PostgreSQL database. This access could allow unauthorized monitoring of database metrics but does not include write or administrative privileges.
Mitigation Recommendations
The vulnerability is fixed in the following revisions: 1189 (arm64) and 1190 (amd64) on the dev track (14/edge), and 1216 (arm64) and 1217 (amd64) on the stable track (14/stable). Users should upgrade to these or later revisions to remediate the issue.
CVE-2026-104055: CWE-532 Insertion of sensitive information into log file in Canonical postgresql-operator
Description
CVE-2026-104055 is a vulnerability in Canonical's postgresql-operator charm where the Prometheus postgres_exporter logs the monitoring user's password in cleartext upon database connection errors. This password exposure allows any actor with log access to obtain read-only pg_monitor privileges on PostgreSQL. The issue is fixed in specific revisions of the dev and stable tracks.
CVSS v4.0
Score 5.3medium
Affected software
Canonical
postgresql-operator
pkg:github/charmed-postgresqlRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The postgresql-operator charm by Canonical runs a Prometheus postgres_exporter that uses a dedicated monitoring PostgreSQL user to collect database metrics. When database connection errors occur, the exporter improperly logs the monitoring user's password in cleartext. This exposure can lead to unauthorized access to PostgreSQL with read-only monitoring privileges. The vulnerability is identified as CWE-532 (Insertion of sensitive information into log file). Fixes have been applied in revisions 1189 and 1190 for the dev track (14/edge) and revisions 1216 and 1217 for the stable track (14/stable).
Potential Impact
An attacker who can read the exporter logs can recover the monitoring user's password, granting them read-only pg_monitor access to the PostgreSQL database. This access could allow unauthorized monitoring of database metrics but does not include write or administrative privileges.
Mitigation Recommendations
The vulnerability is fixed in the following revisions: 1189 (arm64) and 1190 (amd64) on the dev track (14/edge), and 1216 (arm64) and 1217 (amd64) on the stable track (14/stable). Users should upgrade to these or later revisions to remediate the issue.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- canonical
- Date Reserved
- 2026-10-01T18:01:17.865Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ac11725a43b0b3b89cacf7a
Added to database: 10/03/2026, 14:54:29 UTC
Last enriched: 10/03/2026, 14:57:32 UTC
Last updated: 10/03/2026, 15:16:56 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.