The vulnerability lies in the Amazon Redshift Python Connector’s vector_in() function, which internally applies Python’s eval() to data received from the Redshift server before version 2.1.14. This unsafe usage allows a rogue server or an attacker performing a man‑in‑the‑middle attack to inject arbitrary Python code that will be executed on the client’s environment. The impact is the ability to run code of the attacker’s choice on the client machine, providing full control of that host.

This flaw affects the AWS Amazon Redshift connector for Python, all releases prior to 2.1.14. Users employing the driver to connect to Redshift servers are vulnerable until the driver is upgraded to version 2.1.14 or later.

The CVSS score of 9.3 marks this vulnerability as critical, and while the EPSS value is not reported, the absence of a known exploit in the KEV catalog does not diminish its inherent risk. The attack can be carried out remotely by controlling the Redshift server or intercepting and manipulating data in transit. An attacker does not need local file access or elevated privileges on the client to achieve arbitrary code execution.