01 Record

CVE-2026-77810

Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector

CriticalPUBLISHEDCNA: AMZN

Base score9.4 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

02 Description

Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector

Published

2026-08-21 19:34Z6 HR AGO

Last updated

2026-08-21 19:35Z6 HR AGO

Reserved

2026-08-21

Assigning CNA

AMZN

Record state

PUBLISHED

Severity

Critical (CVSS 9.4)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Weaknesses

CWE-95Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Variant

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

2d7c0b8d82373285e808f46acb72f522e5b1f29e2f60f106852e7003e76868cc

VendorProductVersionsPlatforms