CVE-2026-77810
CriticalCVSS 9.9Summary
In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later.
Risk Assessment
The risk includes unauthorized access to Lambda properties, potentially leading to exposure of sensitive data, credentials, or configuration, and compromise of the environment's security.
Recommendation
It is recommended to upgrade aws-athena-query-federation to version v2026.30.1 or later to prevent unauthorized access to Lambda properties.
Original NVD description (English source)
In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later.