CVE-2026-58139

Name of the Vulnerable Software and Affected Versions DuckDB AWS extension (affected versions not specified)

Description A security policy bypass exists that allows any database user with SQL execution permissions to extract plaintext AWS credentials. By calling the load aws credentials() function and setting the redact secret parameter to false, a user can circumvent the database-wide allow unredacted secrets=false policy. This allows the retrieval of the AWS credential chain, including access key id, secret access key, session token, and region. This is especially critical in managed environments where pg duckdb is preloaded and credential chains like IMDSv2, IRSA, ECS task role, or EC2 instance role are accessible.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, restrict the use of the load aws credentials() function or limit SQL execution permissions for untrusted users.