VULNERABILITY INTELLIGENCE
CVE-2026-77810
CVSS score9.9 CRITICAL
EPSS probability0.63%
CISA KEVNot currently listed
Published2026-08-21
Last modified2026-10-12
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description
In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later.
Weakness classification
- ff89ba41-3aa1-4d27-914a-91399e9639e5: CWE-95