CVE-2026-77810— Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector
Quick assessment
Affected
AWS Athena Federated Query Neptune Connector
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Neptune 连接器中，通过 Athena 联邦查询访问 Neptune 的用户可能会获取到为连接器提供计算支持的 Lambda 函数的属性访问权限。为修复此问题，用户应将 aws-athena-query-federation 升级至版本 v2026.30.1 或更高版本。
Possible ATT&CK Techniques 2 AI
T1592 · Gather Victim Host Information T1059 · Command and Scripting InterpreterAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| AWS | Athena Federated Query Neptune Connector | 2024.15.1≤ 2026.28.1 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-77810
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector
Source: CVE Program / CVE List V5
Vulnerability Description
In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
动态执行代码中指令转义处理不恰当(Eval注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| AWS | Athena Federated Query Neptune Connector | 2024.15.1 ~ 2026.28.1 | - |
|
II. Public POCs for CVE-2026-77810
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
Qwen3.6-35B-A3B
· 10697 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month
III. Intelligence Information for CVE-2026-77810
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-77810 (2)
Vendor Pages for CVE-2026-77810 (1)
IV. Related Vulnerabilities
Same vendor: AWS
-
CVE-2026-77811
Stored Cross-Site Scripting via Integration Template Asset i -
CVE-2026-18420
RCE via Prototype Pollution in OpenSearch Dashboards -
CVE-2026-75910
Incorrect privilege assignment in the Amazon aws-athena-quer -
CVE-2026-18428
SQL Query Validation Bypass in OpenSearch Direct Query -
CVE-2026-19643
Out-of-bounds read in the Base64 decoder in Amazon aws-sdk-c
Same weakness: CWE-95
-
CVE-2026-78136
CHIRP代码注入漏洞（eval注入） -
CVE-2026-61539
Xinference: Remote code execution via unsafe `eval()` in Lla -
CVE-2026-76833
@cgauge/yaml npm Package Arbitrary Code Execution via eval() -
CVE-2026-34398
FreeCAD: Arbitrary Code Execution via eval() on untrusted pr -
CVE-2026-34399
FreeCAD: Arbitrary Code Execution via eval() on untrusted SV
V. Comments for CVE-2026-77810
No comments yet