{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3aamazonaws_cloud_development_kit/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:amazon:aws_cloud_development_kit:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.3,"id":"CVE-2026-115418"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["AWS Cloud Development Kit (@aws-cdk/aws-redshift-alpha \u003c 2.274.0-alpha.0)"],"_cs_severities":["high"],"_cs_tags":["sqli","vulnerability","aws","cloud"],"_cs_type":"advisory","_cs_vendors":["Amazon"],"content_html":"\u003cp\u003eThe @aws-cdk/aws-redshift-alpha module within the AWS Cloud Development Kit (CDK) contains an SQL injection vulnerability in its database-query custom resource handlers. This flaw allows an attacker who can influence construct property values (specifically user names, comments, or passwords) to execute arbitrary SQL statements with Amazon Redshift superuser privileges. This could lead to unauthorized privilege escalation and modification of cluster access controls.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation grants an attacker Amazon Redshift superuser privileges, allowing them to grant access to cluster users or modify database permissions, potentially compromising the integrity and confidentiality of data stored within the cluster.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade the @aws-cdk/aws-redshift-alpha module to version 2.274.0-alpha.0 or later immediately.\u003c/li\u003e\n\u003cli\u003eReview existing table grants and permissions assigned to the PUBLIC role in impacted Amazon Redshift clusters to identify unauthorized modifications.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-26T19:44:40Z","date_published":"2026-10-26T19:44:40Z","id":"https://feed.craftedsignal.io/briefs/2026-10-aws-cdk-sqli/","summary":"An SQL injection vulnerability in the @aws-cdk/aws-redshift-alpha module allows attackers to execute arbitrary SQL commands with superuser privileges on Amazon Redshift clusters by manipulating construct property values.","title":"AWS Cloud Development Kit: SQL injection in @aws-cdk/aws-redshift-alpha (CVE-2026-115418)","url":"https://feed.craftedsignal.io/briefs/2026-10-aws-cdk-sqli/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:amazon:aws_cloud_development_kit:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}