bartek@aws: ~/news
$ whoami
$ AWS Architect · DevOps · Cloud
Thursday, October 22, 2026

Amazon Athena Engine 3 Authorization Flaw Leaks Cross-Account Metadata

Amazon Athena engine version 3 has a nasty authorization bug (CVE-2026-115416) that could let authenticated users peek at AWS account IDs and SQL query metadata from other accounts. The good news? Your actual query results and S3 data stay safe. If you're running Athena engine v3, check AWS's security bulletin for patches—action required here.

source: [aws/security-bulletin]