aws.amazon.com /security/security-bulletins/2026-033-aws
aws.amazon.com • May 30, 2026Bulletin ID: 2026-033-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 05/18/2026 13:15 PM PDT
amazon-redshift-python-driver is the official Python connector for Amazon Redshift. We identified a code injection issue in versions 2.1.13 and earlier that could allow a rogue server or man-in-the-middle to execute arbitrary code on the client.
Impacted versions: <=2.1.13
This issue has been addressed in amazon-redshift-python-driver version 2.1.14 . We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.
We would like to thank Kexin Chen and the Institute of Information Engineering, Chinese Academy of Sciences for collaborating through the coordinated disclosure process.
Please email [email protected] with any security questions or concerns.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
