cveboard RSS feed

CVE-2025-12967

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2025
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users. We recommend customers upgrade to the following versions: AWS JDBC Wrapper to v2.6.5, AWS Go Wrapper to 2025-10-17, AWS NodeJS Wrapper to v2.0.1, AWS Python Wrapper to v1.4.0 and AWS PGSQL ODBC driver to v1.0.1

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

JDBC Wrapper

Vendor
AWS
Product
JDBC Wrapper
Platforms
Unknown
Default status
unaffected
JDBC Wrapper · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
2.6.5unaffectedUnavailableUnavailableUnavailableNone listed

Go Wrapper

Vendor
AWS
Product
Go Wrapper
Platforms
Unknown
Default status
unaffected
Go Wrapper · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
2025-10-17unaffectedUnavailableUnavailableUnavailableNone listed

NodeJS Wrapper

Vendor
AWS
Product
NodeJS Wrapper
Platforms
Unknown
Default status
unaffected
NodeJS Wrapper · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
2.0.1unaffectedUnavailableUnavailableUnavailableNone listed

Python Wrapper

Vendor
AWS
Product
Python Wrapper
Platforms
Unknown
Default status
unaffected
Python Wrapper · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
1.4.0unaffectedUnavailableUnavailableUnavailableNone listed

ODBC driver

Vendor
AWS
Product
ODBC driver
Platforms
Unknown
Default status
unaffected
ODBC driver · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
1.0.1affectedUnavailableUnavailableUnavailableNone listed