CVE-2026-110812

Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials. To remediate this issue, users not enrolled in...

EUVD-2026-102193

Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials. To remediate this issue, users not enrolled in...

Amazon Neptune Engine deserialization injection vulnerability

A security vulnerability exists in Amazon Neptune Engine versions from 1.2.0.0 up to but including 1.5.0.0. This vulnerability stems from the Gremlin graph data import component’s deserialization of untrusted data, potentially allowing authenticated remote attackers with standard database...