VYPR
← All advisories
Critical severity9.1OSV Advisory· Published Apr 4, 2025· Updated Apr 15, 2026

CVE-2025-31480

CVE-2025-31480

Description

aiven-extras is a PostgreSQL extension. This is a privilege escalation vulnerability, allowing elevation to superuser inside PostgreSQL databases that use the aiven-extras package. The vulnerability leverages the format function not being schema-prefixed. Affected users should install 1.1.16 and ensure they run the latest version issuing ALTER EXTENSION aiven_extras UPDATE TO '1.1.16' after installing it. This needs to happen in each database aiven_extras has been installed in.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Aiven Open/Aiven ExtrasOSV2 versions
    1.0, 1.0.2, 1.0.3, …+ 1 more
    • (no CPE)range: 1.0, 1.0.2, 1.0.3, …
    • (no CPE)range: <1.1.16

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.