Skip to content
Threat Feed
Subscribe
high advisory

Amazon Redshift JDBC Driver: Remote code execution via unsafe reflection (CVE-2026-119084)

The Amazon Redshift JDBC Driver before version 2.3.0 is vulnerable to remote code execution due to unsafe class loading and reflection triggered by malicious JDBC connection strings or credential profiles.

CVE search metadata

CVE search record: CVE-2026-119084. Severity: high. CVSS: 8.1. KEV: no. Product: Amazon Redshift JDBC Driver (< 2.3.0). Brief: Amazon Redshift JDBC Driver: Remote code execution via unsafe reflection (CVE-2026-119084). Brief link: https://feed.craftedsignal.io/briefs/2026-11-redshift-jdbc-rce/

Triage facts

Revision 1
Applicability
Amazon Redshift JDBC Driver (< 2.3.0)
Evidence
Unknown
Severity
High
Action
Immediate escalation
Sources
4 public sources
Freshness
Revision 1Nov 4, 00:46 UTC
Vulnerabilities
1 CVE
Source quality
A1Very likely

Amazon Redshift JDBC Driver versions prior to 2.3.0 are susceptible to an RCE vulnerability (CVE-2026-119084) arising from unsafe reflection in connection parameters and AWS credentials profile handling. An unauthenticated attacker capable of influencing the JDBC connection URL or the AWS credentials configuration can execute arbitrary code within the application process, provided a gadget class is present on the application classpath.

Impact

Successful exploitation allows for remote code execution in the context of the application using the affected driver, potentially leading to full system compromise or lateral movement within the environment hosting the application.

Recommendation

  • Upgrade the Amazon Redshift JDBC Driver to version 2.3.0 or later immediately.
  • Audit application configurations that dynamically construct JDBC connection strings from user-supplied input to identify and sanitize potential injection vectors.
  • Review AWS credentials profile configuration access to ensure they are not modifiable by untrusted processes or users.

Immediate actions

Upgrade Amazon Redshift JDBC Driver to 2.3.0 or later

IT Operations 24h

Threat Hunt

Search application logs for unexpected or abnormally long JDBC connection strings containing suspicious class paths or reflection-related parameters

T1059 high medium confidence hunt now

Data: Application logs, JDBC connection configuration source logs

Mitigations

Upgrade Amazon Redshift JDBC Driver to 2.3.0

immediate IT Operations

CVE-2026-119084