CVE-2025-55282: aiven-db-migrate allows Privilege Escalation via unrestricted search_path during migration
aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that allows a user to elevate to superuser inside PostgreSQL databases during a migration from an untrusted source server. By exploiting a lack of searchpath restriction, an attacker can override pgcatalog and execute untrusted operators as a superuser. This vulnerability is fixed in 1.0.7.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-55282?
CVE-2025-55282 is classified as a high severity vulnerability due to its potential for privilege escalation in PostgreSQL databases.
How do I fix CVE-2025-55282?
To fix CVE-2025-55282, upgrade to Aiven db-migrate version 1.0.7 or later.
What does CVE-2025-55282 affect?
CVE-2025-55282 affects the Aiven database migration tool, specifically versions prior to 1.0.7.
Can CVE-2025-55282 be exploited remotely?
Yes, CVE-2025-55282 can potentially be exploited during a database migration from an untrusted source server.
What type of attack does CVE-2025-55282 enable?
CVE-2025-55282 enables a privilege escalation attack, allowing users to gain superuser access within PostgreSQL databases.