A critical vulnerability in the Amazon Redshift JDBC Driver allows for unauthorized class or code selection, posing a risk of arbitrary code execution for applications utilizing the driver.

This is a CWE-470 vulnerability where the driver improperly handles externally-controlled input used to select classes or code, which can be leveraged to execute unauthorized operations.

The vulnerability carries a CVSS score of 8.1, reflecting the potential for full system impact if an application using this driver is compromised. This could lead to unauthorized data access, system manipulation, or service disruption within environments leveraging the Redshift JDBC driver.

Immediate Action: Update the Amazon Redshift JDBC Driver to version 2.2.2 or later, which contains the necessary security fixes.

Proactive Monitoring: Scan applications that utilize the Redshift JDBC driver to ensure the updated dependency is properly integrated and that no unauthorized database connectivity patterns are observed.

Compensating Controls: Ensure that applications using this driver are running with the principle of least privilege to limit the impact of potential arbitrary code execution.

Public Exploit Available: No — there is no confirmed public weaponized exploit or PoC in the available data.

Given the critical role of JDBC drivers in enterprise database connectivity, organizations should prioritize updating the Redshift JDBC driver immediately. Verifying the dependency version in all build pipelines is essential to ensure this vulnerability is remediated across the application estate.