AWS Aurora PostgreSQL Wrappers Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in AWS Wrappers for Amazon Aurora PostgreSQL. This issue allows a low-privilege authenticated user to create a crafted function that could be executed with the permissions of other Amazon RDS users, potentially escalating privileges to the rds_superuser role.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a user to gain rds_superuser rights on the database.

Remediation

Users are advised to upgrade to the following versions: AWS JDBC Wrapper v2.6.5, AWS Go Wrapper 2025-10-17, AWS NodeJS Wrapper v2.0.1, AWS Python Wrapper v1.4.0, and AWS PGSQL ODBC driver v1.0.1.