CVE-2026-77810 - Issue with Athena Federated Query Neptune Connector
Amazon Athena ยท 2026-10-21
Actions
Technical Details
| Affected Versions | <=v2026.28.1, >=v2024.15.1 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-77810 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update Athena Federated Query to version v2026.30.1 to address the security vulnerability CVE-2026-77810 and ensure the connector is patched against unauthorized access to Lambda properties.
For Platform Teams
Deploy the updated Athena Federated Query version v2026.30.1 to enhance security and ensure the platform remains compliant with the latest security standards.
For Executives
Implement the latest Athena Federated Query version v2026.30.1 to mitigate security risks associated with CVE-2026-77810 and ensure compliance with security standards.
Source
Related Amazon Athena Updates
- CVE-2026-115416 - Incorrect authorization checks in Amazon Athena engine version 3 query processing (2026-10-22)
- CVE-2026-75910 - Issue with Athena Federated Query Clickhouse Connector (2026-10-21)
- Issues with Amazon Athena ODBC Driver (2026-10-19)
- CVE-2026-12283 - Issue with Athena Federated Query Synapse Connector (2026-10-19)
- Issues with Amazon Athena ODBC Driver (2026-10-14)