CVE-2026-115418 - SQL injection in the database-query custom resource handlers in Amazon Web Services (AWS)
Web Services ยท 2026-10-26
Actions
Technical Details
| Affected Versions | <2.274.0-alpha.0 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-115418 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update your CDK applications to version 2.274.0-alpha.0 of @aws-cdk/aws-redshift-alpha to address the SQL injection vulnerability (CVE-2026-115418) and review existing table grants to PUBLIC.
For Platform Teams
Integrate the updated @aws-cdk/aws-redshift-alpha module into your platform to enhance security and prevent SQL injection attacks in Amazon Redshift deployments.
For Executives
Implement the latest @aws-cdk/aws-redshift-alpha version 2.274.0 to mitigate the risk of SQL injection attacks, ensuring the security and integrity of your Amazon Redshift deployments.