CVE-2025-31480
aiven-extras allows PostgreSQL Privilege Escalation through format function
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
aiven-extras allows PostgreSQL Privilege Escalation through format function
aiven-extras is a PostgreSQL extension. This is a privilege escalation vulnerability, allowing elevation to superuser inside PostgreSQL databases that use the aiven-extras package. The vulnerability leverages the format function not being schema-prefixed. Affected users should install 1.1.16 and ensure they run the latest version issuing ALTER EXTENSION aiven_extras UPDATE TO '1.1.16' after installing it. This needs to happen in each database aiven_extras has been installed in.
Reserved 2025-03-28 | Published 2025-04-04 | Updated 2025-04-04 | Assigner GitHub_MCWE-426: Untrusted Search Path
github.com/...extras/security/advisories/GHSA-33xh-jqgf-6627
github.com/...ommit/77b5f19a0c1d196bc741ff5c774f85fe7ca3063b
Support options
