EUVD-2026-34900
GHSA-mhww-p97m-3368
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
6DescriptionCVE.org
An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL will allow a remote authenticated low-privilege actor to escalate privileges to those of another Amazon RDS user, including rds_superuser, via a crafted function created by the actor that runs when that user connects to the cluster through an affected wrapper.
To remediate this issue, users should upgrade to AWS Advanced JDBC Wrapper version 4.0.1.
AnalysisAI
Privilege escalation in the AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL (versions prior to 4.0.1) allows a remote authenticated low-privilege RDS user to gain the privileges of another database user - including rds_superuser - by planting a crafted function that executes when the higher-privileged user connects to the cluster through the affected wrapper. No public exploit identified at time of analysis, and the vendor (Amazon) released a fix in version 4.0.1 on 2026-05-13 that fully qualifies function calls in PostgreSQL topology detection queries to close the search-path attack surface.
Technical ContextAI
The AWS Advanced JDBC Wrapper is Amazon's open-source JDBC driver wrapper that adds features such as fast failover, connection pooling, and topology awareness on top of standard PostgreSQL/MySQL drivers for Amazon Aurora and RDS. The flaw resides in the GlobalDatabasePlugin, which issues internal SQL queries (including topology detection calls) without fully qualifying function names with their schema. This maps to CWE-426 (Untrusted Search Path): when PostgreSQL resolves an unqualified function reference, it walks the session's search_path, allowing a lower-privileged user who can create objects in an earlier-listed schema (e.g., public) to plant a malicious same-named function that is then executed in the security context of any other user - including rds_superuser - whose session triggers the wrapper's topology query. The affected CPE is cpe:2.3:a:aws:aws_advanced_jdbc_wrapper:*:*:*:*:*:*:*:* and the fix referenced in the 4.0.1 release notes specifically calls out 'PostgreSQL topology detection queries to ensure function calls are fully qualified.'
RemediationAI
Vendor-released patch: upgrade to AWS Advanced JDBC Wrapper version 4.0.1 or later (https://github.com/aws/aws-advanced-jdbc-wrapper/releases/tag/4.0.1), which fully qualifies function calls in the PostgreSQL topology detection queries used by the GlobalDatabasePlugin per the 2026-05-13 release notes; see the AWS security bulletin at https://aws.amazon.com/security/security-bulletins/2026-039-aws/ for guidance. If immediate upgrade is not possible, compensating controls include revoking CREATE on the public schema from PUBLIC and from low-privileged roles (REVOKE CREATE ON SCHEMA public FROM PUBLIC) so attackers cannot plant shadowing functions - note this may break applications that legitimately create objects in public - and setting an explicit, restricted search_path for rds_superuser and other high-privileged users (e.g., SET search_path = pg_catalog, "$user") to prevent resolution against attacker-controlled schemas. As a deployment-level mitigation, restrict use of the GlobalDatabasePlugin to trusted applications and avoid connecting privileged maintenance accounts through the wrapper until patched.
More in PostgreSQL
View allPostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() improperl
An issue was discovered in Appsmith before 1.52. Rated critical severity (CVSS 9.8), this vulnerability is remotely expl
Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows re
Unauthenticated arbitrary file write in Splunk Enterprise (below 10.2.4 and 10.0.7) and Splunk Cloud Platform (below 10.
Unauthenticated SQL injection in Sangoma Switchvox SMB Edition 8.3 (build 104997) lets remote attackers execute arbitrar
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allow
The build_tablename function in pgsql.c in the PostgreSQL (aka pgsql) extension in PHP through 5.6.7 does not validate t
A vulnerability in the h2oai/h2o-3 REST API versions 3.46.0.4 allows unauthenticated remote attackers to execute arbitra
In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_serve
Unauthenticated SQL injection in Vendure Shop API allows remote attackers to execute arbitrary SQL commands against the
Parse Server is an open source http web server backend. Rated critical severity (CVSS 10.0), this vulnerability is remot
Hard-coded default PostgreSQL credentials shipped in the docker-compose.yaml of langgenius Dify through version 1.5.1 al
Same weakness CWE-426 – Untrusted Search Path
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today