Package vulnerability, severity medium
AWS SDK for pandas (awswrangler) Iceberg SQL identifier quoting flaw (CVE-2026-119301)
Published
Improper neutralization of quoting syntax in SQL identifier construction in the Apache Iceberg write component of awswrangler (AWS SDK for pandas) is tracked as CVE-2026-119301. An authenticated user who can modify AWS Glue Data Catalog metadata could use a crafted column name to read any table a more privileged principal can access and to write to the table that principal is updating. Versions 3.5.2 up to but not including 3.17.1 are affected, and 3.17.1 contains the fix.
What's affected
- awswrangler (pypi)>=3.5.2 <3.17.1
What to do
- Upgrade awswrangler to version 3.17.1 or later.
- Make sure any forked or derivative code includes the fix.
- Until upgraded, avoid calling to_iceberg() with a principal that has more privileges than the principals who can modify that table's AWS Glue Data Catalog metadata.
- Restrict glue:UpdateTable and related permissions on shared databases.
Check whether you were affected
Pharon tells teams automatically when this affects something they run. To check a machine, run this in Claude Code with the Pharon plugin, in the repository that uses it:
/pharon:check-incident awswrangler-iceberg-sql-quoting-2026-11References
Notice awswrangler-iceberg-sql-quoting-2026-11, signed with key feed-prod-2026-10 (Ed25519). The Pharon CLI verifies the signature before using a notice.