Aaiven

Products

Exploited and recent CVEs

• CVE-2026-39961 Medium 6.8 Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource 0.4%
• CVE-2025-55283 Critical 9.1 aiven-db-migrate allows Privilege Escalation through use of psql during migration 0.6%
• CVE-2025-55282 Critical 9.1 aiven-db-migrate allows Privilege Escalation via unrestricted search_path during migration 0.7%
• CVE-2025-31480 Critical 9.1 aiven-extras allows PostgreSQL Privilege Escalation through format function 0.5%
• CVE-2023-32305 High 8.8 aiven-extras PostgreSQL Privilege Escalation Through Overloaded Search Path 0.7%