GitHub Advisoryadvisory · PyPI

GHSA-4jvf-wx3f-2x8q AWS Advanced Python Wrapper: Privilege Escalation in Aurora PostgreSQL instance

HIGH Published 2025-11-13 Modified 2025-11-13 Official page ↗
Aliases
CVE-2025-12967
Ecosystem
PyPI
Packages
aws_advanced_python_wrapper
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-470
Reviewed
2025-11-13

Affected packages

• PyPI aws_advanced_python_wrapper: < 1.4.0 → fixed in 1.4.0

Description

Description of Vulnerability: An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users. AWS recommends customers upgrade to the following versions: AWS Python Wrapper to v1.4.0 Source of Vulnerability Report: Allistair Ishmael Hakim Affected products & versions: AWS Python Wrapper < 1.4.0 Platforms: MacOS/Windows/Linux

Related

Alias · CVE (1)

  • CVE-2025-12967 An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role. vulnerability

Weakness · CWE (1)

  • CWE-470 Use of Externally-Controlled Input to Select Classes or Code weakness

References