High severity8.8NVD Advisory· Published Nov 3, 2026· Updated Nov 3, 2026

CVE-2026-119922

Description

Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4 may allow remote authenticated users to elevate their privileges. To remediate this issue, we recommend you upgrade to Babelfish for PostgreSQL extension versions 4.10, 5.6, 6.1 or later.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Babelfish For PostgreSQL/Babelfish for PostgreSQLllm-fuzzy
Range: 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4
AWS/Babelfish for PostgreSQLllm-fuzzy
Range: 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8, 5.1-5.4

Patches

Vulnerability mechanics

References

aws.amazon.com/security/security-bulletins/2026-165-aws/nvd
github.com/babelfish-for-postgresql/babelfish-for-postgresql/releases/tag/BABEL_6_1_0__PG_18_4nvd
github.com/babelfish-for-postgresql/babelfish_extensions/security/advisories/GHSA-fv9p-9rr9-fm35nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000