---
id: "CVE-2026-18061"
kind: "vulnerability"
aliases: ["CVE-2026-18061"]
title: "AWS JDBC Wrapper: XML external entities let cached data read local files"
severity: "medium"
cvss: 6.0
epss: 0.00269
exploited: false
status: "open"
category: "package"
products: [{"name": "amazon advanced jdbc wrapper", "fixed": ["4.3.0"], "affected": ">= 3.3.0, < 4.3.0", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["aurora", "aws", "java", "jdbc", "lab-disclosure", "mariadb", "mysql", "package", "rds"]
not_affected_if: ["4.3.0-or-later", "default-config", "plugin-not-enabled"]
published_at: "2026-09-11T17:17:08+00:00"
first_seen_at: "2026-10-24T19:12:57+00:00"
updated_at: "2026-10-25T12:38:49+00:00"
sources: [{"source": "lab", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-109-aws/", "first_seen_at": "2026-10-24T19:12:57+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18061", "first_seen_at": "2026-10-24T19:23:38+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-18061", "first_seen_at": "2026-10-25T12:38:49+00:00"}]
---

# AWS JDBC Wrapper: XML external entities let cached data read local files

The AWS Advanced JDBC Wrapper's optional RemoteQueryCachePlugin parses cached XML values with external entities resolved. An actor who can write to a shared cache can read files the application process can read, including stored database and IAM role credentials.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:amazon advanced jdbc wrapper affected >= 3.3.0, < 4.3.0 fixed 4.3.0

## How to check

- Run the wrapper's version check or inspect the dependency: affected versions are `>= 3.3.0` and `<= 4.2.0`.
- Search application config for `RemoteQueryCachePlugin` or the plugin name in the connection properties; the plugin is off by default.
- If it is enabled, confirm whether the shared cache can be written by anyone other than trusted principals.

## Fix

- Upgrade the AWS Advanced JDBC Wrapper to `4.3.0`.
- Patch any forked or derivative copies of the wrapper code as the advisory recommends.
- Until upgraded, disable `RemoteQueryCachePlugin` or restrict write access to the shared cache to trusted principals only.

## Timeline

- 2026-10-24T19:12:57+00:00 lab https://aws.amazon.com/security/security-bulletins/rss/2026-109-aws/ — AWS: CVE-2026-18061 - XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin
- 2026-10-24T19:23:38+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-18061
- 2026-10-25T12:38:49+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-18061

## Documents

- [advisory] AWS: CVE-2026-18061 - XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin https://aws.amazon.com/security/security-bulletins/rss/2026-109-aws/

## From the sources

CVE-2026-18061 - XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin

### CVE-2026-18061 - XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin

Bulletin ID: 2026-109-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/11/2026 09:30 AM PDT

Description:

The AWS Advanced JDBC Wrapper is an open-source library that enhances existing JDBC drivers with AWS-specific capabilities such as Aurora failover, IAM authentication, and automated SQL query caching for applications connecting to Amazon Aurora, RDS MySQL, and RDS MariaDB.

We identified CVE-2026-18061, an improper restriction of XML external entity (XXE) references in the optional RemoteQueryCachePlugin. When this plugin is enabled with a shared cache, an actor with write access to that cache infrastructure might place crafted XML in a cached column value. When an application subsequently reads that cached result as XML, the wrapper's XML parsers resolve external entities, which might allow the actor to disclose sensitive files readable by the application process, including stored database and IAM role credentials.

Impacted versions: >= 3.3.0 and <= 4.2.0

Resolution:

This issue has been addressed in AWS Advanced JDBC Wrapper version 4.3.0. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.

Workarounds:

The RemoteQueryCachePlugin is not enabled by default. Customers who cannot immediately upgrade can mitigate this issue by not enabling the RemoteQueryCachePlugin, or by restricting write access to the shared cache so that only trusted principals can write to it.

References:

- CVE-2026-18061
- GHSA-fpvp-qwgm-v6h9

 Please email aws-security@amazon.com with any security questions or concerns.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_