{"id":"CVE-2026-119922","published":"2026-11-03T19:17:57.020","lastModified":"2026-11-03T21:17:03.283","description":"Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 may allow remote authenticated users to elevate their privileges. To remediate this issue, we recommend you upgrade to Babelfish for PostgreSQL extension versions 4.10, 5.6, 6.1 or later.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-266"],"vendors":[],"products":[],"references":[{"url":"https://aws.amazon.com/security/security-bulletins/2026-165-aws/","tags":[]},{"url":"https://github.com/babelfish-for-postgresql/babelfish-for-postgresql/releases#release-BABEL_4_10_0__PG_16_14","tags":[]},{"url":"https://github.com/babelfish-for-postgresql/babelfish-for-postgresql/releases#release-BABEL_5_6_0__PG_17_10","tags":[]},{"url":"https://github.com/babelfish-for-postgresql/babelfish-for-postgresql/releases/tag/BABEL_6_1_0__PG_18_4","tags":[]},{"url":"https://github.com/babelfish-for-postgresql/babelfish_extensions/security/advisories/GHSA-fv9p-9rr9-fm35","tags":[]}],"exploitRefs":[{"url":"https://github.com/babelfish-for-postgresql/babelfish-for-postgresql/releases#release-BABEL_4_10_0__PG_16_14","tags":[]},{"url":"https://github.com/babelfish-for-postgresql/babelfish-for-postgresql/releases#release-BABEL_5_6_0__PG_17_10","tags":[]},{"url":"https://github.com/babelfish-for-postgresql/babelfish-for-postgresql/releases/tag/BABEL_6_1_0__PG_18_4","tags":[]},{"url":"https://github.com/babelfish-for-postgresql/babelfish_extensions/security/advisories/GHSA-fv9p-9rr9-fm35","tags":[]}],"hasPoc":true,"ai":{"summary":"Improper access control in Babelfish for PostgreSQL allows authenticated low-privilege users to escalate privileges due to insufficient authorization checks in versions 1.2–1.5, 2.1–2.15, 3.1–3.12, 4.0–4.8, and 5.1–5.4.","exploitability":"Exploitation requires valid authentication as a low-privilege user; no additional conditions or complex steps are needed beyond standard login.","blast_radius":"Successful exploitation grants elevated privileges, enabling full compromise of confidentiality, integrity, and availability of the PostgreSQL instance.","remediation":"Upgrade to Babelfish for PostgreSQL extension versions 4.10, 5.6, or 6.1 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","auth-bypass","database","postgresql"],"model":"garnet-coder","analyzedAt":"2026-11-04T09:57:52.060Z"}}