CVE-2025-12967

HIGH EPSS 29.9%
Published Nov 10, 20257mo ago · Modified Jun 17, 20262w ago
8.6 CVSS 4.0
High
Find Similar
Published Nov 10, 2025 7mo ago
Last Modified Jun 17, 2026 2w ago

Description

An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users. We recommend customers upgrade to the following versions: AWS JDBC Wrapper to v2.6.5, AWS Go Wrapper to 2025-10-17, AWS NodeJS Wrapper to v2.0.1, AWS Python Wrapper to v1.4.0 and AWS PGSQL ODBC driver to v1.0.1

CVSS Details

Base Score
8.6
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction P
Scope X

Threat Intelligence

EPSS Exploit Probability
29.9% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-470

References 11

  • aws.amazon.com https://aws.amazon.com/security/security-bulletins/AWS-2025-028/
  • github.com https://github.com/aws/aws-advanced-go-wrapper/releases/tag/release-2025-10-17
  • github.com https://github.com/aws/aws-advanced-go-wrapper/security/advisories/GHSA-7wq2-32h4-9hc9
  • github.com https://github.com/aws/aws-advanced-jdbc-wrapper/releases/tag/2.6.5
  • github.com https://github.com/aws/aws-advanced-jdbc-wrapper/security/advisories/GHSA-7xw4-g7mm-r4hh
  • github.com https://github.com/aws/aws-advanced-nodejs-wrapper/releases/tag/2.0.1
  • github.com https://github.com/aws/aws-advanced-nodejs-wrapper/security/advisories/GHSA-8wj8-cfxr-9374
  • github.com https://github.com/aws/aws-advanced-python-wrapper/releases/tag/1.4.0
  • github.com https://github.com/aws/aws-advanced-python-wrapper/security/advisories/GHSA-4jvf-wx3f-2x8q
  • github.com https://github.com/aws/aws-pgsql-odbc/releases/tag/1.0.1
  • github.com https://github.com/aws/aws-pgsql-odbc/security/advisories/GHSA-q327-fgm8-7mxf

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.