CVE-2025-12967 - CVE House
Back to Database
Status published High CVE-2025-12967

An issue in AWS Wrappers for Amazon Aurora PostgreSQL may...

Vulnerability Description

An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users. We recommend customers upgrade to the following versions: AWS JDBC Wrapper to v2.6.5, AWS Go Wrapper to 2025-10-17, AWS NodeJS Wrapper to v2.0.1, AWS Python Wrapper to v1.4.0 and AWS PGSQL ODBC driver to v1.0.1

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-12967

Credits & Attribution

No credits recorded in the NVD database.

References

More from AWS

View All →
CVE-2025-8069
Local Privilege Escalation Vulnerability in AWS Client VPN Windows Client
High 7.3
CVE-2025-3048
Path Traversal in AWS SAM CLI allows file copy to local cache
Medium 6.9
CVE-2025-3047
Path Traversal in AWS SAM CLI allows file copy to build container
Medium 6.9
CVE-2025-2888
Improper timestamp caching during snapshot rollback in tough
Medium 5.7
CVE-2025-2887
Failure to detect delegated target rollback in tough
Medium 5.7

Affected Vendor

Affected Software

JDBC Wrapper, Go Wrapper, NodeJS Wrapper, Python Wrapper, ODBC driver
Vulnerable Versions:
2.6.5, 2025-10-17, 2.0.1, 1.4.0, 1.0.1

Timeline

Official Publish: November 10th, 2025
Last Modified: February 26th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-470

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.