What is 2026-182-AWS?

2026-182-AWS is a security advisory published by AWS Security Bulletins. CVE-2026-126793 - Privilege escalation in Aurora PostgreSQL dialect detection in AWS Advanced Go Wrapper

Which CVE IDs does 2026-182-AWS cover?

2026-182-AWS covers the following CVE IDs: CVE-2026-126793. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

2026-182-AWS

CVE-2026-126793 - Privilege escalation in Aurora PostgreSQL dialect detection in AWS Advanced Go Wrapper

Vendor

AWS Security Bulletins

Published

November 12, 2026

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2026-126793 →

📋 Description

Bulletin ID: 2026-182-AWS Publication Date: 11/12/2026 13:00 PM PST Description: An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release 2026-04-06 (awssql/v2.0.0) and before release 2026-07-29 (awssql/v2.0.3) could allow a remote authenticated user to escalate privileges to those of another database user, including a member of the rds_superuser role, via a crafted function that runs when that user connects to an Aurora PostgreSQL cluster through an affected version of the wrapper. Impacted versions: AWS Advanced Go Wrapper >=2026-04-06,
Refer to the article for the most up-to-date and complete information.

🔗 References (1)

advisoryhttps://aws.amazon.com/security/security-bulletins/rss/2026-182-aws/