Critical severity9.9NVD Advisory· Published Aug 21, 2026

CVE-2026-77810

Description

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later.

Affected products

AWS/aws-athena-query-federationllm-create
Range: >=2026.30.1

Patches

Vulnerability mechanics

References

aws.amazon.com/security/security-bulletins/2026-087-aws/nvd
github.com/awslabs/aws-athena-query-federation/releases/tag/v2026.30.1nvd
github.com/awslabs/aws-athena-query-federation/security/advisories/GHSA-v7c2-5wfg-qg44nvd

News mentions

No linked articles in our index yet.

cvss	0.643
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000