Is CVE-2026-119301 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-119301 being exploited in the wild.

How severe is CVE-2026-119301?

High severity, with a CVSS score of 7.9, published 2 November 2026.

Which products and versions are affected?

AWS SDK for pandas >= 3.5.2, < 3.17.1.

Am I affected by CVE-2026-119301?

Check whether you run Amazon AWS or AWS SDK for pandas at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-119301: AWS SDK for pandas SQL injection in Iceberg identifier generation

Q: Is there a fix for CVE-2026-119301?

Yes: fixed in AWS SDK for pandas 3.17.1. Until then: Restrict glue:UpdateTable and related permissions on shared databases. Until upgrading, avoid calling to_iceberg() with a principal that has more privileges than the principals who can modify that table's AWS Glue Data Catalog metadata. ["network"] Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

CVE-2026-119301 · Severity: high · CVSS 7.9 · Published 2026-11-02

AWS SDK for pandas (awswrangler) is a Python library that enables data scientists to integrate pandas DataFrames with AWS data services like Athena, S3, and Glue. A SQL injection vulnerability in the Iceberg table write functionality allows an authenticated user with permission to modify Glue metadata to craft column names that bypass SQL quoting, enabling unauthorized data access and modification of tables owned by higher-privileged users.

Technologies: Amazon AWS. Vendors: Amazon, AWS.

Quick answers

Is CVE-2026-119301 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-119301 being exploited in the wild.
How severe is CVE-2026-119301?: High severity, with a CVSS score of 7.9, published 2 November 2026.
Which products and versions are affected?: AWS SDK for pandas >= 3.5.2, < 3.17.1.
Is there a fix for CVE-2026-119301?: Yes: fixed in AWS SDK for pandas 3.17.1. Until then: Restrict glue:UpdateTable and related permissions on shared databases. Until upgrading, avoid calling to_iceberg() with a principal that has more privileges than the principals who can modify that table's AWS Glue Data Catalog metadata.</anigation> <parameter name="attack_vector">["network"] Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-119301 attacked?: It is in a software library.
Am I affected by CVE-2026-119301?: Check whether you run Amazon AWS or AWS SDK for pandas at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: AWS SDK for pandas 3.17.1

Restrict glue:UpdateTable and related permissions on shared databases. Until upgrading, avoid calling to_iceberg() with a principal that has more privileges than the principals who can modify that table's AWS Glue Data Catalog metadata.</anigation> <parameter name="attack_vector">["network"]

Technical details

Improper neutralization of quoting syntax in SQL identifier construction within Apache Iceberg's write component allows authenticated attackers to inject SQL code via crafted column names in to_iceberg() calls. An attacker with glue:UpdateTable permissions on a shared database can read any table accessible to a more privileged principal and write to tables that principal is updating. The vulnerability requires both Glue metadata modification permissions and execution context with to_iceberg() invocations.

Affected products

AWS SDK for pandas >= 3.5.2, < 3.17.1

Timeline

2026-11-02: disclosed
2026-08-03: patched: Version 3.17.1 released

References

https://aws.amazon.com/security/security-bulletins/rss/2026-161-aws/

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.