CVE-2026-8838

CRITICAL

Remote Code Execution via eval() Injection in amazon-redshift-python-driver

Title source: cna
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2026-8838. PoCs published by fearlessresponsesolution, Maxime288.

AI-analyzed exploit summary This repository contains a functional PoC for CVE-2026-8838, demonstrating RCE in the Amazon Redshift Python driver via unsafe `eval()` usage in the `vector_in()` function. The PoC includes both a simulated malicious server and a vulnerable client to showcase the exploit.

Description

Unsafe use of Python's eval() on server-received data in the vector_in() function in amazon-redshift-python-driver before 2.1.14 allows a rogue server or man-in-the-middle actor to execute arbitrary code on the client. To remediate this issue, users should upgrade to version 2.1.14.

Exploits (2)

github WORKING POC
by fearlessresponsesolution · tsqlpoc
https://github.com/fearlessresponsesolution/cve-pocs/tree/master/pocs/CVE-2026-8838

This repository contains a functional PoC for CVE-2026-8838, demonstrating RCE in the Amazon Redshift Python driver via unsafe `eval()` usage in the `vector_in()` function. The PoC includes both a simulated malicious server and a vulnerable client to showcase the exploit.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: amazon-redshift-python-driver < 2.1.14
No auth needed
Prerequisites: Network access to the target client · Ability to intercept/modify Redshift server responses (MitM or rogue server)
devstral-2 · analyzed May 19, 2026 Full analysis →
nomisec WORKING POC
by Maxime288 · poc
https://github.com/Maxime288/CVE-2026-8838-RCE

This repository contains a functional proof-of-concept exploit for CVE-2026-8838, demonstrating remote code execution via unsafe use of `eval()` in the Amazon Redshift Python driver. The PoC includes both a simulated malicious server and a client to trigger the vulnerability.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: amazon-redshift-python-driver < 2.1.14
No auth needed
Prerequisites: Network access to a vulnerable client · Ability to intercept or simulate a malicious Redshift server response
devstral-2 · analyzed May 19, 2026 Full analysis →

References (3)

Core 3

Scores

CVSS v3 9.8
EPSS 0.0008
EPSS Percentile 23.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-94
Status published
Products (2)
AWS/Amazon Redshift connector for Python < 2.1.13
pypi/redshift-connector 0 - 2.1.14PyPI
Published May 18, 2026
Tracked Since May 19, 2026