CVE-2026-77810
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later.
Risk Assessment
The risk includes unauthorized access to Lambda properties, potentially leading to exposure of sensitive data, credentials, or configuration, and compromise of the environment's security.
Recommendation
It is recommended to upgrade aws-athena-query-federation to version v2026.30.1 or later to prevent unauthorized access to Lambda properties.
Other vulnerabilities in aws-athena-query-federation
Original NVD description (English source)
In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS