bartek@aws: ~/news
$ whoami
$ AWS Architect · DevOps · Cloud
Thursday, October 15, 2026

Amazon Neptune Security Alert: Gremlin Deserialization Vulnerability

Amazon Neptune has a critical vulnerability (CVE-2026-110812) in its Gremlin graph-import path. Authenticated users with query permissions could exploit unsafe deserialization to execute unintended code in the query engine. You need to upgrade to the patched engine version immediately if you're running Neptune 1.2.0.0 or later.

source: [aws/security-bulletin]