PT-2025-33672

CVE-2025-55282

Published

2025-08-18

Updated

2025-08-23

Description by

CVSS 3.1

9.1

Critical

MetricsAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: aiven-db-migrate versions prior to 1.0.7

Description: aiven-db-migrate is a database migration tool. A privilege escalation issue exists that allows a user to elevate to superuser inside PostgreSQL databases during a migration from an untrusted source server. This is due to a lack of search path restriction, which allows an attacker to override pg catalog and execute untrusted operators as a superuser.

Recommendations: Update to aiven-db-migrate version 1.0.7 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')

Related identifiers

CVE-2025-55282