bartek@aws: ~/news
$ whoami
$ AWS Architect · DevOps · Cloud
Tuesday, November 3, 2026

Amazon Redshift JDBC Driver RCE Vulnerability – Update Required

Amazon Redshift JDBC Driver versions before 2.3.0 have a critical remote code execution flaw (CVE-2026-119084). The driver can load and execute arbitrary classes from malicious JDBC connection URLs or AWS credentials profiles. You need to upgrade to version 2.3.0 or later immediately to patch this vulnerability.

source: [aws/security-bulletin]