Skip to content
Remote Code Execution Vulnerability in Amazon Redshift JDBC Driver

Remote Code Execution Vulnerability in Amazon Redshift JDBC Driver

First seen 3 Nov 2026, 22:45 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 4, 2026 at 00:46 UTC

A vulnerability, CVE-2026-119084, was disclosed on November 3, 2026, affecting Amazon Redshift JDBC Driver versions prior to 2.3.0. The flaw allows an attacker to execute arbitrary code by manipulating JDBC connection URL parameters or AWS credentials profile fields. This vulnerability could be exploited if an actor can influence these parameters, leading to potential code execution in the application's context. Amazon has released version 2.3.0 to address this issue and recommends immediate upgrades. Users unable to upgrade should ensure that their applications do not construct JDBC connection URLs from untrusted input. The vulnerability has a CVSS score of 8.1, indicating a high severity level. Security researchers involved in the disclosure process include 4ra1n, pyn3rd, and unam4.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-11-03
CVE-2026-119084 published
Amazon disclosed a remote code execution vulnerability in Redshift JDBC Driver affecting versions prior to 2.3.0.
Aws.Amazon
2026-11-03
Patch released
Amazon released version 2.3.0 of the Redshift JDBC Driver to address the vulnerability.
Aws.Amazon

More articles in this cluster (5)

Following this threat?

Track CVE-2026-119084 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 3

Common questions

Which versions are affected?
Amazon Redshift JDBC Driver versions prior to 2.3.0 are affected.
Is there a patch available?
Yes, Amazon released version 2.3.0 to address the vulnerability.
What should I do if I can't upgrade immediately?
Ensure that your application does not build JDBC connection URLs from untrusted input.