CVE-2026-119301: Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas
Improper neutralization of quoting syntax in SQL identifier construction in the Apache Iceberg write component in AWS SDK for pandas (also published as awswrangler) 3.5.2 through 3.17.0 might allow an authenticated remote user with permission to modify AWS Glue Data Catalog metadata to read any table that a separate, more privileged principal can access and write to the table that principal is updating via a crafted column name.
To remediate this issue, users should upgrade to version 3.17.1 or later.
Event History
Frequently Asked Questions
Which deployments are exposed?
AWS SDK for pandas (awswrangler) versions 3.5.2 through 3.17.0 are affected when using the Apache Iceberg write component. Exploitation also depends on an attacker having permission to modify AWS Glue Data Catalog metadata and on a separate, more privileged principal accessing or updating tables.
What access does an attacker need?
The attacker must be authenticated remotely and have permission to modify AWS Glue Data Catalog metadata. They can use a crafted column name to influence SQL identifier generation.
What could an attacker do if exploitation succeeds?
An attacker may read any table that the more privileged principal can access. They may also write to the table that principal is updating.
How should this be remediated?
Upgrade AWS SDK for pandas to version 3.17.1 or later. If an immediate upgrade is not possible, restrict permissions to modify AWS Glue Data Catalog metadata to trusted principals.