CVE-2026-8178: Remote Code Execution via Unsafe Reflection in Amazon Redshift JDBC Driver

Vulnerability ID: CVE-2026-8178

CVSS Score: 8.1

Published: 2026-05-14

The Amazon Redshift JDBC Driver prior to version 2.2.2 contains a remote code execution vulnerability. The driver processes connection properties beginning with the datatype. prefix by passing the user-supplied value to Class.forName() . This allows attackers who control JDBC connection strings to load arbitrary classes and execute malicious code via static initializers within the application's JVM context.

TL;DR

Unsafe class loading in the Amazon Redshift JDBC Driver (< 2.2.2) permits remote code execution.…