CVE-2025-55283: Aiven Aiven-DB-Migrate

High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days.

aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that allows elevation to superuser inside PostgreSQL databases during a migration from an untrusted source server. The vulnerability stems from psql executing commands embedded in a dump from the source server. This vulnerability is fixed in 1.0.7.

Affected products

• Aiven Aiven-DB-Migrate: before 1.0.7 (fixed in 1.0.7)

Published 2025-08-18. Last modified 2026-06-17.