Vulnerability · 1 source · latest 5h

AWS warns of privilege escalation flaw CVE-2026-119922 in Babelfish for PostgreSQL

VULNERABILITYCVE-2026-119922redteam/daily · 1 source

Severity: Medium
Highest CVSS: 8.7
Exploited: Not known
Sources: 1

What happened

AWS has issued security bulletin 2026-165-AWS for CVE-2026-119922, an improper access control flaw in the Babelfish for PostgreSQL extension. Remote authenticated users can elevate their privileges. AWS recommends upgrading to fixed extension versions, though the article excerpt does not list them.

For IT people · Written by AI from 1 source · Wrong?

What to do

Check whether Babelfish for PostgreSQL is installed and which extension version is in use.
Upgrade Babelfish for PostgreSQL to a fixed extension version, as recommended in the AWS bulletin 2026-165-AWS.

Written by AI from the sources, checked against them

Read the full story at the source

Vulnerabilities

CVE-2026-119922CVSS 8.7Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 may allow remote authenticated users to elevate their privileges. To remediate this issue, we recommend you upgrade to Babelfish for PostgreSQL extension versions 4.10, 5.6, 6.1 o

Full story timeline · 2 updates

Who reported · 1 outlet

AWS Security Bulletins

Who and what is in it

Companies

AWS

Products

PostgreSQL