Vulnerability · 1 source · latest 3h

AWS warns of remote code execution flaw in Amazon Redshift JDBC driver

VULNERABILITYCVE-2026-119084redteam/daily · 1 source

Severity: High
Highest CVSS: 9.2
Exploited: Not known
Sources: 1

What happened

Amazon has warned of a security flaw in a tool that lets programs connect to its Redshift data service. Under certain conditions, the flaw could let an attacker run their own code on a system using the affected tool. Versions before 2.3.0 are affected.

Like I’m new · Written by AI from 1 source · Wrong?

What to do

Update the Amazon Redshift JDBC Driver to version 2.3.0 or later.
Check which applications and systems use a Redshift JDBC driver version earlier than 2.3.0.

Written by AI from the sources, checked against them

Read the full story at the source

Vulnerabilities

CVE-2026-119084CVSS 9.2Unsafe reflection in the connection parameter and credentials profile handling of Amazon Redshift JDBC Driver before 2.3.0 might allow an actor who can influence the JDBC connection URL or the AWS credentials profile to execute arbitrary code in the application context, provided a suitable class is

Full story timeline · 2 updates

Who reported · 1 outlet

AWS Security Bulletins