Issue with Athena Federated Query Neptune Connector
UnratedCVE-2026-77810 · Published Aug 21, 2026 · updated Sep 9, 2026
Bulletin ID: 2026-087-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 08/21/2026 12:30 PM PDT Description: Amazon Athena is a serverless, interactive query service that lets you analyze data directly in Amazon S3 using standard SQL. Athena Query Federation is a feature that allows you to connect to data sources outside of Amazon S3 like DynamoDB, Azure Synapse, and custom connectors using standard SQL syntax. These connectors are open source and deployed to the Athena service on a regular basis. We identified CVE-2026-77810, in the Neptune connector where a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. Impacted versions: =v2024.15.1 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.
Affected versions
Details and references
- Severity from
- no source yet
More AWS advisories
All AWS| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Aug 25 | Consent bypass in Strands Agents Tools python_repl tool UnratedAug 25 | Unrated | No fix yet |
| Aug 21 | Stored Cross-Site Scripting via Integration Template Asset in OpenSearch DashboardsUnratedAug 21 | Unrated | No fix yet |
| Aug 21 | Issue with FreeRTOS-Kernel - CVE-2026-77234, CVE-2026-77235, CVE-2026-77236...UnratedAug 21 | Unrated | No fix yet |
| Aug 20 | Issue with Athena Federated Query Clickhouse ConnectorUnratedAug 20 | Unrated | No fix yet |
| Aug 18 | Issue with Amazon ion-java - Memory-amplification denial of serviceUnratedAug 18 | Unrated | No fix yet |
| Aug 18 | Uncontrolled resource consumption in OpenSearch Dashboards capabilities routeUnratedAug 18 | Unrated | No fix yet |