{"id":"GHSA-fpvp-qwgm-v6h9","kind":"vulnerability","aliases":["GHSA-fpvp-qwgm-v6h9"],"related":[],"title":"CVE-2026-18061 - XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin","description":"CVE-2026-18061 - XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin\n\n### CVE-2026-18061 - XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin\n\nBulletin ID: 2026-109-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/11/2026 09:30 AM PDT\n\nDescription:\n\nThe AWS Advanced JDBC Wrapper is an open-source library that enhances existing JDBC drivers with AWS-specific capabilities such as Aurora failover, IAM authentication, and automated SQL query caching for applications connecting to Amazon Aurora, RDS MySQL, and RDS MariaDB.\n\nWe identified CVE-2026-18061, an improper restriction of XML external entity (XXE) references in the optional RemoteQueryCachePlugin. When this plugin is enabled with a shared cache, an actor with write access to that cache infrastructure might place crafted XML in a cached column value. When an application subsequently reads that cached result as XML, the wrapper's XML parsers resolve external entities, which might allow the actor to disclose sensitive files readable by the application process, including stored database and IAM role credentials.\n\nImpacted versions: >= 3.3.0 and <= 4.2.0\n\nResolution:\n\nThis issue has been addressed in AWS Advanced JDBC Wrapper version 4.3.0. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.\n\nWorkarounds:\n\nThe RemoteQueryCachePlugin is not enabled by default. Customers who cannot immediately upgrade can mitigate this issue by not enabling the RemoteQueryCachePlugin, or by restricting write access to the shared cache so that only trusted principals can write to it.\n\nReferences:\n\n- CVE-2026-18061\n- GHSA-fpvp-qwgm-v6h9\n\n Please email aws-security@amazon.com with any security questions or concerns.","summary":"The optional RemoteQueryCachePlugin in the AWS Advanced JDBC Wrapper resolves external entities when it parses cached XML, so a party with write access to a shared cache can plant crafted XML. An attacker can then read files the application process can read, including stored database and IAM role credentials.","severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["aurora","aws","java","jdbc","lab-disclosure","package","rds","self-hosted"],"not_affected_if":["default-config","plugin-not-enabled","versions-outside-range"],"how_to_check":"- Check the wrapper version in the project dependencies, for example `software.amazon.jdbc:aws-advanced-jdbc-wrapper` in `pom.xml` or `build.gradle`; versions `>= 3.3.0` and `<= 4.2.0` are affected.\n- Check whether `RemoteQueryCachePlugin` is enabled in the connection properties or plugin list, for example in `plugins` settings.\n- Check whether the shared cache backing it can be written by principals other than the application.","fix":"- Upgrade AWS Advanced JDBC Wrapper to `4.3.0` or later.\n- Apply the same fix to any forked or derivative copies of the wrapper.\n- Until upgraded, disable `RemoteQueryCachePlugin` or restrict write access to the shared cache to trusted principals only.","status":"open","published_at":null,"first_seen_at":"2026-10-24T19:12:57+00:00","triaged_at":"2026-10-25T04:51:37+00:00","updated_at":"2026-10-25T04:51:37+00:00","category":"package","confidence":0.8,"triage":{"at":"2026-10-25T04:51:37Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade AWS Advanced JDBC Wrapper to `4.3.0` or later.\n- Apply the same fix to any forked or derivative copies of the wrapper.\n- Until upgraded, disable `RemoteQueryCachePlugin` or restrict write access to the shared cache to trusted principals only.","reach":"local","title":"AWS JDBC Wrapper: XXE in RemoteQueryCachePlugin can leak files and credentials","impact":"medium","summary":"The optional RemoteQueryCachePlugin in the AWS Advanced JDBC Wrapper resolves external entities when it parses cached XML, so a party with write access to a shared cache can plant crafted XML. An attacker can then read files the application process can read, including stored database and IAM role credentials.","category":"package","nicknames":[],"who_cares":["java","aws","aurora","rds","jdbc","self-hosted"],"confidence":0.8,"needs_auth":"yes","worst_case":"Attacker reads files and stored database or IAM credentials from the application","analyst_note":"","how_to_check":"- Check the wrapper version in the project dependencies, for example `software.amazon.jdbc:aws-advanced-jdbc-wrapper` in `pom.xml` or `build.gradle`; versions `>= 3.3.0` and `<= 4.2.0` are affected.\n- Check whether `RemoteQueryCachePlugin` is enabled in the connection properties or plugin list, for example in `plugins` settings.\n- Check whether the shared cache backing it can be written by principals other than the application.","needs_analyst":false,"not_affected_if":["default-config","plugin-not-enabled","versions-outside-range"],"who_is_affected":"Only applications that use the AWS Advanced JDBC Wrapper within the affected versions and have the optional RemoteQueryCachePlugin enabled with a shared cache are exposed. Exposure also depends on an actor being able to write to that cache. Applications that do not enable the plugin, or that run on wrapper versions outside the affected range, can skip this.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000776,"input_tokens":4023,"output_tokens":748,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-109':114C '-18061':3A,87C,100C,178C,340C '-2026':2A,86C,99C,177C,339C '09':126C '09/11/2026':125C '2026':113C '3.3.0':260C '30':127C '4.2.0':262C '4.3.0':275C 'access':58B,205C,323C 'actor':202C,241C 'address':268C 'advanc':10A,42B,94C,107C,133C,271C 'allow':239C 'amazon':167C 'applic':74B,164C,221C,249C 'attack':68B 'attent':122C 'aurora':24B,154C,168C 'authent':157C 'autom':159C 'aw':9A,25B,41B,93C,106C,115C,117C,132C,149C,270C 'aws-security@amazon.com':348C 'aws-specif':148C 'bulletin':111C 'cach':51B,62B,162C,200C,208C,216C,225C,327C 'cannot':307C 'capabl':151C 'code':289C 'column':217C 'concern':354C 'connect':165C 'content':118C 'craft':65B,212C 'credenti':84B,257C 'custom':305C 'cve':1A,85C,98C,176C,338C 'databas':80B,253C 'date':124C 'default':304C 'deriv':288C 'descript':130C 'disclos':243C 'disclosur':30B 'driver':146C 'email':347C 'enabl':196C,302C,316C 'enhanc':143C 'ensur':284C 'entiti':6A,47B,90C,103C,185C,236C 'exist':144C 'extern':5A,46B,89C,102C,184C,235C 'failov':155C 'file':72B,245C 'fix':296C 'fork':286C 'fpvp':16A,21A,343C 'ghsa':15A,20A,342C 'ghsa-fpvp-qwgm-v6h9':14A,19A,341C 'host':35B 'iam':82B,156C,255C 'id':112C 'identifi':175C 'immedi':308C 'impact':258C 'import':120C 'improp':180C 'includ':78B,251C 'incorpor':293C 'infrastructur':209C 'issu':265C,313C 'java':26B 'jdbc':11A,27B,43B,95C,108C,134C,145C,272C 'lab':29B 'lab-disclosur':28B 'latest':281C 'librari':141C 'mariadb':173C 'might':210C,238C 'mitig':311C 'mysql':170C 'new':295C 'open':139C 'open-sourc':138C 'option':37B,190C 'packag':31B 'pars':50B 'parser':233C 'parti':55B 'patch':291C 'pdt':129C 'place':211C 'plant':64B 'pleas':346C 'plugin':194C 'princip':332C 'process':75B,250C 'public':123C 'queri':161C 'question':352C 'qwgm':17A,22A,344C 'rds':32B,169C,172C 'read':71B,77B,223C 'readabl':246C 'recommend':277C 'refer':187C,337C 'remotequerycacheplugin':13A,38B,97C,110C,191C,299C,318C 'requir':121C 'resolut':263C 'resolv':45B,234C 'restrict':181C,321C 'result':226C 'role':83B,256C 'scope':116C 'secur':351C 'self':34B 'self-host':33B 'sensit':244C 'share':61B,199C,326C 'sourc':140C 'specif':150C 'sql':160C 'store':79B,252C 'subsequ':222C 'trust':331C 'type':119C 'upgrad':278C,309C 'v6h9':18A,23A,345C 'valu':218C 'version':259C,274C,282C 'workaround':297C 'wrapper':12A,44B,96C,109C,135C,230C,273C 'write':57B,204C,322C,334C 'xml':4A,52B,66B,88C,101C,183C,213C,228C,232C 'xxe':7A,91C,104C,186C","nicknames":[],"mitigations":[],"who_affected":"Only applications that use the AWS Advanced JDBC Wrapper within the affected versions and have the optional RemoteQueryCachePlugin enabled with a shared cache are exposed. Exposure also depends on an actor being able to write to that cache. Applications that do not enable the plugin, or that run on wrapper versions outside the affected range, can skip this.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":null,"kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"lab","external_id":"https://aws.amazon.com/security/security-bulletins/rss/2026-109-aws/#GHSA-fpvp-qwgm-v6h9","url":"https://aws.amazon.com/security/security-bulletins/rss/2026-109-aws/","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T19:12:57+00:00","fetched_at":"2026-10-24T19:12:57+00:00","note":"AWS: CVE-2026-18061 - XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin"}],"documents":[{"id":2927,"url":"https://aws.amazon.com/security/security-bulletins/rss/2026-109-aws/","title":"AWS: CVE-2026-18061 - XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin","kind":"advisory","source":"lab","text":"CVE-2026-18061 - XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin\n\n### CVE-2026-18061 - XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin\n\nBulletin ID: 2026-109-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/11/2026 09:30 AM PDT\n\nDescription:\n\nThe AWS Advanced JDBC Wrapper is an open-source library that enhances existing JDBC drivers with AWS-specific capabilities such as Aurora failover, IAM authentication, and automated SQL query caching for applications connecting to Amazon Aurora, RDS MySQL, and RDS MariaDB.\n\nWe identified CVE-2026-18061, an improper restriction of XML external entity (XXE) references in the optional RemoteQueryCachePlugin. When this plugin is enabled with a shared cache, an actor with write access to that cache infrastructure might place crafted XML in a cached column value. When an application subsequently reads that cached result as XML, the wrapper's XML parsers resolve external entities, which might allow the actor to disclose sensitive files readable by the application process, including stored database and IAM role credentials.\n\nImpacted versions: >= 3.3.0 and <= 4.2.0\n\nResolution:\n\nThis issue has been addressed in AWS Advanced JDBC Wrapper version 4.3.0. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.\n\nWorkarounds:\n\nThe RemoteQueryCachePlugin is not enabled by default. Customers who cannot immediately upgrade can mitigate this issue by not enabling the RemoteQueryCachePlugin, or by restricting write access to the shared cache so that only trusted principals can write to it.\n\nReferences:\n\n- CVE-2026-18061\n- GHSA-fpvp-qwgm-v6h9\n\n Please email aws-security@amazon.com with any security questions or concerns.","published_at":null,"relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}