The DuckDB AWS extension for DuckDB contains a vulnerability that allows users with SQL execution permissions to bypass security policies and extract plaintext AWS credentials by invoking the load_aws_credentials function with redact_secret=false. This bypass circumvents the allow_unredacted_secrets=false policy, exposing the full AWS credential chain (access_key_id, secret_access_key, session_token, and region). These credentials are valid for immediate use against AWS APIs, increasing risk in environments where AWS credential chains are accessible, such as those using IMDSv2, IRSA, ECS task roles, or EC2 instance roles. The vulnerability affects the cloud service version of duckdb-aws. A patch is available and remediation is managed by the vendor.

An attacker with SQL execution permissions can extract valid plaintext AWS credentials from the DuckDB AWS extension, enabling unauthorized access to AWS resources. This can lead to unauthorized actions within AWS environments, especially in managed setups where AWS credential chains are accessible. The exposure of access_key_id, secret_access_key, session_token, and region directly compromises AWS API security.

The vendor manages remediation for this cloud-hosted service and has made a patch available. Users should ensure they apply the vendor's official updates or patches to mitigate this vulnerability. Check the vendor advisory for the latest remediation guidance.