CVE-2025-55283: aiven-db-migrate allows Privilege Escalation through use of psql during migration
aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that allows elevation to superuser inside PostgreSQL databases during a migration from an untrusted source server. The vulnerability stems from psql executing commands embedded in a dump from the source server. This vulnerability is fixed in 1.0.7.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-55283?
CVE-2025-55283 has a high severity rating due to its privilege escalation risk within PostgreSQL databases.
How do I fix CVE-2025-55283?
You can fix CVE-2025-55283 by upgrading the aiven-db-migrate tool to version 1.0.7 or later.
What causes CVE-2025-55283?
CVE-2025-55283 is caused by the aiven-db-migrate tool allowing untrusted source server migrations to escalate privileges to superuser in PostgreSQL.
Who is affected by CVE-2025-55283?
Users of aiven-db-migrate versions prior to 1.0.7 are affected by CVE-2025-55283.
What is aiven-db-migrate?
Aiven-db-migrate is a database migration tool designed for use with Aiven services, particularly for PostgreSQL databases.