Vulnerability · 1 source · latest 6h

AWS warns of privilege escalation flaw CVE-2026-119922 in Babelfish for PostgreSQL

VULNERABILITYCVE-2026-119922redteam/daily · 1 source

Severity: Medium
Highest CVSS: 8.7
Exploited: Not known
Sources: 1

What happened

Amazon Web Services has published a warning about a flaw in an add-on for the PostgreSQL database software. A logged-in user could use the flaw to gain more access than they should have. The fix is to update the add-on to a fixed version.

Like I’m new · Written by AI from 1 source · Wrong?

What to do

Check whether Babelfish for PostgreSQL is installed and which extension version is in use.
Upgrade Babelfish for PostgreSQL to a fixed extension version, as recommended in the AWS bulletin 2026-165-AWS.

Written by AI from the sources, checked against them

Read the full story at the source

Vulnerabilities

CVE-2026-119922CVSS 8.7Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 may allow remote authenticated users to elevate their privileges. To remediate this issue, we recommend you upgrade to Babelfish for PostgreSQL extension versions 4.10, 5.6, 6.1 o

Full story timeline · 2 updates

Who reported · 1 outlet

AWS Security Bulletins

Who and what is in it

Companies

AWS

Products

PostgreSQL