CVE-2026-45534

Deferred Deferred - Pending Action

Remote Code Execution in DataEase via Malicious Redshift JDBC Configuration

Publication date: 2026-07-15

Last updated on: 2026-07-16

Assigner: GitHub, Inc.

Description

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase Redshift datasource connections can load attacker-controlled rsjdbc.ini configuration from System.getProperty("java.io.tmpdir"), setting socketFactory=org.springframework.context.support.FileSystemXmlApplicationContext so com.amazon.redshift.Driver#connect, com.amazon.redshift.Driver#getJdbcIniFile, and com.amazon.redshift.util.ObjectFactory#instantiate execute a reflection-based remote code execution chain during a normal JDBC connection through io.dataease.datasource.type.Redshift. This issue is fixed in version 2.10.23.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-15

Last Modified

2026-07-16

Generated

2026-08-06

AI Q&A

2026-07-16

EPSS Evaluated

2026-08-04

NVD

CVE-2026-45534

EUVD

EUVD-2026-44775

Affected Vendors & Products

Vendor	Product	Version / Range
dataease	dataease	to 2.10.23 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-94	The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

Executive Summary

CVE-2026-45534 is a Remote Code Execution (RCE) vulnerability in DataEase versions prior to 2.10.23. It allows attackers to execute arbitrary commands on the system by exploiting a flaw in the Redshift JDBC driver configuration. The attack involves writing a malicious rsjdbc.ini file to system directories like java.io.tmpdir, which triggers a reflection-based RCE chain during JDBC connection processing.

Detection Guidance

Check for unauthorized rsjdbc.ini files in system temporary directories or user home folders. Monitor for unexpected Spring Framework XML payloads in these files. Inspect DataEase logs for suspicious JDBC connection attempts or reflection-based execution patterns.

Impact Analysis

This vulnerability allows attackers to remotely execute arbitrary commands on your system, potentially leading to full system compromise. An attacker could gain control over the affected DataEase instance, steal sensitive data, install malware, or disrupt services. The impact includes unauthorized access, data breaches, and potential lateral movement within your network.

Compliance Impact

This RCE vulnerability can lead to unauthorized access and data breaches, violating GDPR's data protection requirements and HIPAA's security rules. Organizations may face legal penalties, reputational damage, and loss of compliance certifications if exploited. The vulnerability exposes sensitive data to potential theft or manipulation.

Mitigation Strategies

Upgrade DataEase to version 2.10.23 or later immediately to apply the security fix.
Restrict write access to system properties directories like java.io.tmpdir and user.home.
Monitor network traffic for unexpected outbound connections from DataEase processes.
Review and remove any suspicious rsjdbc.ini files in temporary directories.

Hi! I’m here to help you understand CVE-2026-45534. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70