Amazon Athena Engine 3 Authorization Flaw Leaks Cross-Account Metadata
Amazon Athena engine version 3 has a nasty authorization bug (CVE-2026-115416) that could let authenticated users peek at AWS account IDs and SQL query metadata from other accounts. The good news? Your actual query results and S3 data stay safe. If you're running Athena engine v3, check AWS's security bulletin for patches—action required here.
source: [aws/security-bulletin]