CVE-2026-119922
Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 may allow remote authenticated users to elevate their privileges. To remediate this issue, we recommend you upgrade to Babelfish for PostgreSQL extension versions 4.10, 5.6, 6.1 or later.
Am I affected?
Sign in and add the software you use to your watchlist: we check it against every new vulnerability.
Show me how to fix itTimeline
- First covered by RedTeamDaily
- Published by NVD
- Last updated by NVD
Coverage
AWS warns of privilege escalation flaw CVE-2026-119922 in Babelfish for PostgreSQL
AWS has issued security bulletin 2026-165-AWS for CVE-2026-119922, an improper access control flaw in the Babelfish for PostgreSQL extension. Remote authenticated users can elevate their privileges. AWS recommends upgrading to fixed extension versions, though the article excerpt does not list them.
Sources: NVD and CISA known exploited vulnerabilities catalogue.