CVE-2026-77810
Critical
Description
In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later.
SeverityCritical
CVSS9.9
Exploit probability—
ProductAthena Federated Query Neptune Connector
PublishedAug 21, 2026
First seenAug 21, 2026
Weakness typeCWE-95CWE-95
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| AWS Athena Federated Query Neptune Connector | 2024.15.1 ≤ v ≤ 2026.28.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.