CVE-2026-126793

Name of the Vulnerable Software and Affected Versions AWS Advanced Go Wrapper versions 2.0.0 through 2.0.2

Description An untrusted search path issue exists in the Aurora PostgreSQL dialect detection. This flaw allows a remote authenticated user to escalate privileges to those of another database user, including members of the rds superuser role, by using a crafted function that executes when the target user connects to an Aurora PostgreSQL cluster.

Recommendations Upgrade to version 2.0.3 or later.