CVE-2026-12283 - Issue with Athena Federated Query Synapse Connector
Amazon Athena ยท 2026-10-19
Actions
Technical Details
| Affected Versions | v2022.20.1, v2026.19.1 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-12283 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update Athena Query Federation to version v2026.21.1 and sanitize Synapse table names to prevent SQL injection attacks, addressing CVE-2026-12283 and reducing security risks.
For Platform Teams
Deploy the patched Athena Query Federation version v2026.21.1 to ensure secure and reliable data querying across your federated data sources.
For Executives
Implement the latest Athena Query Federation version v2026.21.1 to mitigate the security risk posed by CVE-2026-12283 and ensure data integrity and security for your organization.
Source
Related Amazon Athena Updates
- Issues with Amazon Athena ODBC Driver (2026-10-19)
- Issues with Amazon Athena ODBC Driver (2026-10-14)
- CVE-2026-12283 - Issue with Athena Federated Query Synapse Connector (2026-10-14)
- CVE-2026-107352 - Missing authorization checks in Amazon Athena engine version 3 request handling (2026-10-07)
- Issues with Amazon Athena ODBC Driver (2026-09-29)