AWS babelfish-for-postgresql vulnerabilities (CVE)

CVE records published for AWS babelfish-for-postgresql, newest first. Follow to get an email when a new one appears.

3 results
9.8Critical
CVE-2026-119923

Heap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin Parser

AWS babelfish-for-postgresql; Amazon Amazon Aurora PostgreSQL with Babelfish

A heap-based buffer overflow in the TDS prelogin parser in the Babelfish for PostgreSQL extension versions 1.0-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish might allow remote attackers to execute arbitrary OS comman…

8.8High
CVE-2026-119922

Babelfish for PostgreSQL Privilege Escalation

AWS babelfish-for-postgresql; Amazon Amazon Aurora PostgreSQL with Babelfish

Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 and in Amazon Aurora PostgreSQL with Babelfish may allow remote authenticated users to elevate their privileges. To remediate this issue, …