CVE-2026-115416 Incorrect authorization checks in Amazon Athena engine version 3 query processing
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-115416?
CVE-2026-115416 is a medium-severity vulnerability in AWS Amazon Athena, published on 22 Oct 2026.
Official description
Incorrect authorization checks in Amazon Athena engine version 3 query processing could have allowed an authenticated user to read AWS account identifiers and SQL statement text query metadata from other AWS accounts. Query results, and data stored in Amazon S3 or other data sources, were not accessible through this issue.
AWS remediated the issue on October 7, 2026. No customer action is required.
Which versions are affected by CVE-2026-115416?
How do I fix CVE-2026-115416?
No fix has been published for CVE-2026-115416 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-115416 being exploited?
There is no known exploitation of CVE-2026-115416 in the wild and no public exploit code.
Sources
Also known as GHSA-4774-8498-749g.