CVE-2026-119084
Received Received - Intake

Unsafe Reflection in Amazon Redshift JDBC Driver

Publication date: 2026-11-03

Last updated on: 2026-11-03

Assigner: AMZN

Description
Unsafe reflection in the connection parameter and credentials profile handling of Amazon Redshift JDBC Driver before 2.3.0 might allow an actor who can influence the JDBC connection URL or the AWS credentials profile to execute arbitrary code in the application context, provided a suitable class is available on the application classpath. To remediate this issue, users should upgrade to version 2.3.0 or later.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-03
Last Modified
2026-11-03
Generated
2026-11-04
AI Q&A
2026-11-04
EPSS Evaluated
N/A
NVD
CVE-2026-119084
EUVD
EUVD-2026-116383

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
AWS amazon-redshift-jdbc-driver 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-470 The product uses external input with reflection to select which classes or code to use, but it does not sufficiently prevent the input from selecting improper classes or code.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves unsafe reflection in the connection parameter and credentials profile handling of the Amazon Redshift JDBC Driver before version 2.3.0. An attacker who can manipulate the JDBC connection URL or AWS credentials profile could potentially execute arbitrary code in the application context if a suitable class is present on the classpath.

Impact Analysis

This vulnerability could allow an attacker to execute arbitrary code in your application if they can influence the JDBC connection URL or AWS credentials profile. This may lead to unauthorized access, data breaches, or system compromise depending on the application's context and permissions.

Mitigation Strategies

Upgrade the Amazon Redshift JDBC Driver to version 2.3.0 or later to remediate the unsafe reflection vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-119084. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...