Is CVE-2026-119084 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-119084?

CVE-2026-119084 has a CVSS v3 severity of HIGH (8.1).

Back

CVE-2026-119084

Description

Unsafe reflection in the connection parameter and credentials profile handling of Amazon Redshift JDBC Driver before 2.3.0 might allow an actor who can influence the JDBC connection URL or the AWS credentials profile to execute arbitrary code in the application context, provided a suitable class is available on the application classpath. To remediate this issue, users should upgrade to version 2.3.0 or later.

Threat reporting mentioning CVE-2026-119084

Remote Code Execution Vulnerability in Amazon Redshift JDBC DriverA remote code execution vulnerability, identified as CVE-2026-119084, has been discovered in the Amazon Redshift JDBC Driver versions prior to 2.3.0. This flaw allows an attacker t…