Vulnerability related to Amazon Athena permission, authorization, and access control issues

A security vulnerability exists in Amazon Athena Engine version 3. This vulnerability stems from improper authorization checks during query processing, potentially allowing authenticated users to read metadata related to AWS account identifiers and SQL statement texts from other AWS accounts...

CVE-2026-107352

The Amazon Athena engine version 3 contained a vulnerability due to missing authorization checks in request handling. This flaw could have allowed an authenticated user to read limited query metadata , specifically AWS account identifiers and SQL statement text , from other AWS accounts. The vuln...

CVE-2026-107352: Missing Authorization

Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to read limited query metadata AWS account identifiers and SQL statement text from other AWS accounts. Query results, credentials, and Amazon S3 data were not affected. AWS...