logo

Database

Remote command execution In aws_advanced_python_wrapper

Description

AWS Advanced Python Wrapper: Privilege Escalation in Aurora PostgreSQL instance

Description of Vulnerability:

An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users.

AWS recommends customers upgrade to the following versions: AWS Python Wrapper to v1.4.0

Source of Vulnerability Report:

Allistair Ishmael Hakim [email protected]

Affected products & versions:

AWS Python Wrapper < 1.4.0

Platforms:

MacOS/Windows/Linux

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2025-129672. NVD-2025-129673. OSV-2025-129674. OSV-GHSA-4jvf-wx3f-2x8q5. GHSA-7wq2-32h4-9hc96. GHSA-7xw4-g7mm-r4hh7. GHSA-4jvf-wx3f-2x8q8. GHSA-q327-fgm8-7mxf9. GCVE-2025-12967

References

1. https://github.com/aws/aws-advanced-go-wrapper/security/advisories/GHSA-7wq2-32h4-9hc92. https://github.com/aws/aws-advanced-jdbc-wrapper/security/advisories/GHSA-7xw4-g7mm-r4hh3. https://github.com/aws/aws-advanced-python-wrapper/security/advisories/GHSA-4jvf-wx3f-2x8q4. https://github.com/aws/aws-pgsql-odbc/security/advisories/GHSA-q327-fgm8-7mxf5. https://github.com/aws/aws-advanced-python-wrapper/pull/10076. https://aws.amazon.com/security/security-bulletins/AWS-2025-0287. https://github.com/aws/aws-advanced-python-wrapper/releases/tag/1.4.0

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.