CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

← Back to feed

CVE-2026-8838 - Remote Code Execution in amazon-redshift-python-driver

unknownCVE-2026-8838
Bulletin ID: 2026-033-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 05/18/2026 13:45 PM PDT Description: amazon-redshift-python-driver is the official Python connector for Amazon Redshift. We identified a code injection issue in versions 2.1.13 and earlier that could allow a rogue server or man-in-the-middle to execute arbitrary code on the client. Impacted versions: <=2.1.13 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.

CSIRTS triage

vendor: AWSproduct: amazon-redshift-python-driverRemote code executionaffected: <=2.1.13
What
A code injection issue could allow arbitrary code execution on the client.
Who is affected
Users of amazon-redshift-python-driver versions 2.1.13 and earlier.
Urgency
Remediation is urgent due to the potential for remote code execution.
Action
Upgrade to a version later than 2.1.13.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch amazon-redshift-python-driver

Get an email when a new amazon-redshift-python-driver advisory drops — max one per day, one-click unsubscribe.

Details

Source
AWS Security Bulletins (INTL · vendor-psirt · site)
Severity
unknown
Published
2026-08-20
Exploitation
Not in CISA KEV at last sync

Original advisory: https://aws.amazon.com/security/security-bulletins/rss/2026-033-aws/

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2026-8838coverage & exploitation statusNVD · CVE.org

More from AWS Security Bulletins