Advisoriesby IbisAWSAWS-2026-165
Babelfish for PostgreSQL Privilege Escalation
No fix yet
Bulletin ID: 2026-165-AWS Publication Date: 11/03/2026 10:00 AM PST Description: Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 allows remote authenticated users to elevate their privileges. We recommend you upgrade to Babelfish for PostgreSQL extension versions Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin. Read this article
Affected versions
The source does not list versions here. See the source advisory for affected products and fixes.
Changes since it was listed
Severity: Unrated to High
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity from
- NVD
More AWS advisories
All AWS
AWS API MCP Server OAuth token audience validation bypassCVE-2026-115413no fix yetRemote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection...CVE-2026-119084no fix yetStored cross-site scripting (XSS) in AWS Amplify maplibre-gl-js-amplify popup renderingCVE-2026-121652no fix yetAuthorization bypass through a user-controlled key in the Amazon Q Business Lambda hook...CVE-2026-105811no fix yetImproper limitation of a pathname to a restricted directory in the deployment status...CVE-2026-116635no fix yetStored cross-site scripting in the HTML report generator of aidlc-traceability in AWS...CVE-2026-120497no fix yet