CVE-2026-8178
Published: 08 May 2026
Summary
CVE-2026-8178 is a high-severity Unsafe Reflection (CWE-470) vulnerability in Amazon Redshift JDBC Driver (inferred from references). Its CVSS base score is 8.1 (High).
Operationally, ranked at the 20.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
Threat & Defense Details
Likely Mitigating ControlsAI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Externally controlled class or code selection can be resolved and invoked inside the chamber, surfacing unsafe reflection without system impact.
NVD Description
An issue exists in Amazon Redshift JDBC Driver versions prior to 2.2.2. Under certain conditions, the driver could load and execute arbitrary classes when processing JDBC connection URL parameters. An actor who can influence the connection URL could potentially execute…
more
code in the application context, provided a suitable class is available on the application's classpath. To mitigate this issue, users should upgrade to version 2.2.2 or later.
Deeper analysisAI
Automated synthesis unavailable for this CVE.
Details
- CWE(s)