CVE-2026-119922

Description

Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 may allow remote authenticated users to elevate their privileges. To remediate this issue, we recommend you upgrade to Babelfish for PostgreSQL extension versions 4.10, 5.6, 6.1 or later.

Affected Platforms

Weakness Type

CWE-266

References

• https://aws.amazon.com/security/security-bulletins/2026-165-aws/
• https://github.com/babelfish-for-postgresql/babelfish-for-postgresql/releases#re…
• https://github.com/babelfish-for-postgresql/babelfish-for-postgresql/releases#re…
• https://github.com/babelfish-for-postgresql/babelfish-for-postgresql/releases/ta…
• https://github.com/babelfish-for-postgresql/babelfish_extensions/security/adviso…