Vulnerability · 1 source · latest 5h

CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas

VULNERABILITYCVE-2026-119301redteam/daily · 1 source

Severity: Medium
Highest CVSS: 5.0
Exploited: Not known
Sources: 1

What happened

Writing the summary… Our AI is reading all the sources now; it appears here in a few seconds.

From 1 source · Wrong?

What to do

Check whether you use the affected product, and install the vendor’s fix when it is available. Open your watchlist

General advice for this kind of story

Read the full story at the source

Vulnerabilities

CVE-2026-119301CVSS 5.0Improper neutralization of quoting syntax in SQL identifier construction in the Apache Iceberg write component in AWS SDK for pandas (also published as awswrangler) 3.5.2 through 3.17.0 might allow an authenticated remote user with permission to modify AWS Glue Data Catalog metadata to read any tabl

Full story timeline · 2 updates

Who reported · 1 outlet

AWS Security Bulletins

Report a problem

CVE-2026-119301 - Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas · RedTeamDaily