Back to Database
Status published
Critical
CVE-2025-55283
aiven-db-migrate allows Privilege Escalation through use of psql during migration
Vulnerability Description
aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that allows elevation to superuser inside PostgreSQL databases during a migration from an untrusted source server. The vulnerability stems from psql executing commands embedded in a dump from the source server. This vulnerability is fixed in 1.0.7.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-55283
Credits & Attribution
No credits recorded in the NVD database.
References
More from aiven
View All →CVE-2025-55282
aiven-db-migrate allows Privilege Escalation via unrestricted search_path during migration
Critical
9.1
CVE-2025-31480
aiven-extras allows PostgreSQL Privilege Escalation through format function
Critical
9.1
CVE-2023-32305
aiven-extras PostgreSQL Privilege Escalation Through Overloaded Search Path
High
8.8
Affected Vendor
aiven
View all reports →Affected Software
aiven-db-migrate
Vulnerable Versions:
< 1.0.7
Timeline
Official Publish:
August 18th, 2025
Last Modified:
August 18th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H