{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/tags/amazon-redshift/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:amazon:redshift_jdbc_driver:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.1,"id":"CVE-2026-119084"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Amazon Redshift JDBC Driver (\u003c 2.3.0)"],"_cs_severities":["high"],"_cs_tags":["remote-code-execution","jdbc","amazon-redshift","cve-2026-119084"],"_cs_type":"advisory","_cs_vendors":["Amazon"],"content_html":"\u003cp\u003eAmazon Redshift JDBC Driver versions prior to 2.3.0 are susceptible to an RCE vulnerability (CVE-2026-119084) arising from unsafe reflection in connection parameters and AWS credentials profile handling. An unauthenticated attacker capable of influencing the JDBC connection URL or the AWS credentials configuration can execute arbitrary code within the application process, provided a gadget class is present on the application classpath.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for remote code execution in the context of the application using the affected driver, potentially leading to full system compromise or lateral movement within the environment hosting the application.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade the Amazon Redshift JDBC Driver to version 2.3.0 or later immediately.\u003c/li\u003e\n\u003cli\u003eAudit application configurations that dynamically construct JDBC connection strings from user-supplied input to identify and sanitize potential injection vectors.\u003c/li\u003e\n\u003cli\u003eReview AWS credentials profile configuration access to ensure they are not modifiable by untrusted processes or users.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-04T00:46:42Z","date_published":"2026-11-04T00:46:42Z","id":"https://feed.craftedsignal.io/briefs/2026-11-redshift-jdbc-rce/","summary":"The Amazon Redshift JDBC Driver before version 2.3.0 is vulnerable to remote code execution due to unsafe class loading and reflection triggered by malicious JDBC connection strings or credential profiles.","title":"Amazon Redshift JDBC Driver: Remote code execution via unsafe reflection (CVE-2026-119084)","url":"https://feed.craftedsignal.io/briefs/2026-11-redshift-jdbc-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Amazon-Redshift","version":"https://jsonfeed.org/version/1.1"}