Skip to content
Sign in
7.7 High

CVE-2026-115416 Incorrect authorization checks in Amazon Athena engine version 3 query processing could have allowed an authenticated…

Description

Incorrect authorization checks in Amazon Athena engine version 3 query processing could have allowed an authenticated user to read AWS account identifiers and SQL statement text query metadata from other AWS accounts. Query results, and data stored in Amazon S3 or other data sources, were not accessible through this issue. AWS remediated the issue on October 7, 2026. No customer action is required.

Affected products and versions

Product Affected versions Fixed in
Amazon Athena Versions not published

Other CVEs of Amazon Athena

The 2 CVEs of Amazon Athena →
CVE-2026-107352 Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user… 7.7 High
Track this CVE