CVE-2026-75910 - Issue with Athena Federated Query Clickhouse Connector
Amazon Athena ยท 2026-10-21
Actions
Technical Details
| Affected Versions | < V2026.17.1 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-75910 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update the Athena Federated Query Clickhouse Connector to version V2026.17.1 and redeploy with a non-empty SecretNamePrefix to address the security vulnerability identified as CVE-2026-75910.
For Platform Teams
Integrate the latest version of the Athena Federated Query Clickhouse Connector (V2026.17.1) to enhance security and prevent unauthorized access to sensitive data stored in AWS Secrets Manager.
For Executives
Implement the upgrade to aws-athena-query-federation version V2026.17.1 to mitigate the security risk of unauthorized access to AWS Secrets Manager secrets, ensuring data integrity and compliance.
Source
Related Amazon Athena Updates
- CVE-2026-115416 - Incorrect authorization checks in Amazon Athena engine version 3 query processing (2026-10-22)
- CVE-2026-77810 - Issue with Athena Federated Query Neptune Connector (2026-10-21)
- Issues with Amazon Athena ODBC Driver (2026-10-19)
- CVE-2026-12283 - Issue with Athena Federated Query Synapse Connector (2026-10-19)
- Issues with Amazon Athena ODBC Driver (2026-10-14)