CVE-2026-77810 - Issue with Athena Federated Query Neptune Connector
CVE-2026-77810 is a vulnerability in the Amazon Athena Federated Query Neptune connector that allows a user with access to Neptune through Athena to gain access to properties in the Lambda function supplying compute for the connector. This issue affects versions from v2024.15.1 up to and including v2026.28.1. AWS has released a fix in version v2026.30.1. Mitigations include upgrading to the fixed version or applying workarounds such as disabling query passthrough or restricting certain permissions.
AI Analysis
Technical Summary
Amazon Athena's Federated Query feature enables querying external data sources like Neptune via connectors. CVE-2026-77810 is a security flaw in the Neptune connector where an authenticated user accessing Neptune through Athena Federated Query could access properties of the Lambda function that provides compute for the connector. This could expose sensitive Lambda environment details or configuration. The vulnerability affects connector versions >=v2024.15.1 and <=v2026.28.1. AWS addressed this vulnerability in Athena Federated Query version v2026.30.1. Workarounds include disabling query passthrough on the connector, restricting the athena:StartQueryExecution permission on the Neptune catalog, or limiting passthrough queries to Gremlin, openCypher, or SPARQL query languages.
Potential Impact
An attacker with access to Neptune through Athena Federated Query could gain unauthorized access to properties of the Lambda function used by the connector. This could lead to exposure of sensitive configuration or environment details within the Lambda compute environment, potentially aiding further attacks or data leakage. The vulnerability is limited to users with existing access to Neptune via Athena Federated Query.
Mitigation Recommendations
AWS has released an official fix in Athena Federated Query version v2026.30.1. Users should upgrade to this version to remediate the vulnerability. If immediate upgrade is not possible, customers can mitigate the issue by disabling query passthrough on the Neptune connector, restricting the athena:StartQueryExecution permission on the Neptune catalog, or ensuring passthrough queries only use Gremlin, openCypher, or SPARQL languages. These mitigations reduce the risk until the patch can be applied.
CVE-2026-77810 - Issue with Athena Federated Query Neptune Connector
Description
CVE-2026-77810 is a vulnerability in the Amazon Athena Federated Query Neptune connector that allows a user with access to Neptune through Athena to gain access to properties in the Lambda function supplying compute for the connector. This issue affects versions from v2024.15.1 up to and including v2026.28.1. AWS has released a fix in version v2026.30.1. Mitigations include upgrading to the fixed version or applying workarounds such as disabling query passthrough or restricting certain permissions.
Affected software
pkg:github/amazon/athena-federated-query-neptune-connectorRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Amazon Athena's Federated Query feature enables querying external data sources like Neptune via connectors. CVE-2026-77810 is a security flaw in the Neptune connector where an authenticated user accessing Neptune through Athena Federated Query could access properties of the Lambda function that provides compute for the connector. This could expose sensitive Lambda environment details or configuration. The vulnerability affects connector versions >=v2024.15.1 and <=v2026.28.1. AWS addressed this vulnerability in Athena Federated Query version v2026.30.1. Workarounds include disabling query passthrough on the connector, restricting the athena:StartQueryExecution permission on the Neptune catalog, or limiting passthrough queries to Gremlin, openCypher, or SPARQL query languages.
Potential Impact
An attacker with access to Neptune through Athena Federated Query could gain unauthorized access to properties of the Lambda function used by the connector. This could lead to exposure of sensitive configuration or environment details within the Lambda compute environment, potentially aiding further attacks or data leakage. The vulnerability is limited to users with existing access to Neptune via Athena Federated Query.
Mitigation Recommendations
AWS has released an official fix in Athena Federated Query version v2026.30.1. Users should upgrade to this version to remediate the vulnerability. If immediate upgrade is not possible, customers can mitigate the issue by disabling query passthrough on the Neptune connector, restricting the athena:StartQueryExecution permission on the Neptune catalog, or ensuring passthrough queries only use Gremlin, openCypher, or SPARQL languages. These mitigations reduce the risk until the patch can be applied.
Technical Details
- Classification
- {"confidence":0.88,"severitySource":"default","classifier":"rss-v2"}
- Article Source
- {"url":"https://aws.amazon.com/security/security-bulletins/rss/2026-087-aws/","fetched":true,"fetchedAt":"2026-08-21T19:50:22.956Z","wordCount":204}
Threat ID: 6a88abfeacd9273b49a26bb5
Added to database: 08/21/2026, 19:50:22 UTC
Last enriched: 08/21/2026, 19:50:32 UTC
Last updated: 08/21/2026, 20:22:09 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.