CVE-2026-107352 - Missing authorization checks in Amazon Athena engine version 3 request handling
Imported from official source
Bulletin ID: 2026-128-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/07/2026 13:00 PM PDT Description: Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to read limited query metadata (AWS account identifiers and SQL statement text) from other AWS accounts. …
This version
- Version
- 1 of 2
- Recorded
- October 08, 2026 19:09
- Change
- Initial
- Content hash
da700117a59900089823601e1749f368- All versions
- Revision history