AWS Cloud Development Kit (@Aws-Cdk/Aws-Redshift-Alpha < 2.274.0-Alpha.0) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/aws-cloud-development-kit-@aws-cdk/aws-redshift-alpha--2.274.0-alpha.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 26 Oct 2026 19:44:40 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgAWS Cloud Development Kit: SQL injection in @aws-cdk/aws-redshift-alpha (CVE-2026-115418)https://feed.craftedsignal.io/briefs/2026-10-aws-cdk-sqli/Mon, 26 Oct 2026 19:44:40 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-aws-cdk-sqli/An SQL injection vulnerability in the @aws-cdk/aws-redshift-alpha module allows attackers to execute arbitrary SQL commands with superuser privileges on Amazon Redshift clusters by manipulating construct property values.The @aws-cdk/aws-redshift-alpha module within the AWS Cloud Development Kit (CDK) contains an SQL injection vulnerability in its database-query custom resource handlers. This flaw allows an attacker who can influence construct property values (specifically user names, comments, or passwords) to execute arbitrary SQL statements with Amazon Redshift superuser privileges. This could lead to unauthorized privilege escalation and modification of cluster access controls.

Impact

Successful exploitation grants an attacker Amazon Redshift superuser privileges, allowing them to grant access to cluster users or modify database permissions, potentially compromising the integrity and confidentiality of data stored within the cluster.

Recommendation

  • Upgrade the @aws-cdk/aws-redshift-alpha module to version 2.274.0-alpha.0 or later immediately.
  • Review existing table grants and permissions assigned to the PUBLIC role in impacted Amazon Redshift clusters to identify unauthorized modifications.
]]>highadvisorysqlivulnerabilityawscloud