💣Exploit CVE-2025-31480 - Aiven-Extras PostgreSQL Format Function Privilege Escalation

[Mental_Outlaw]

CVE ID : CVE-2025-31480
Published : April 4, 2025, 3:15 p.m. | 17 minutes ago
Description : aiven-extras is a PostgreSQL extension. This is a privilege escalation vulnerability, allowing elevation to superuser inside PostgreSQL databases that use the aiven-extras package. The vulnerability leverages the format function not being schema-prefixed. Affected users should install 1.1.16 and ensure they run the latest version issuing ALTER EXTENSION aiven_extras UPDATE TO '1.1.16' after installing it. This needs to happen in each database aiven_extras has been installed in.
Severity: 9.1 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Reply if you wish me to write a poc tools of this exploit for you.