Amazon Neptune Security Alert: Gremlin Deserialization Vulnerability
Amazon Neptune has a critical vulnerability (CVE-2026-110812) in its Gremlin graph-import path. Authenticated users with query permissions could exploit unsafe deserialization to execute unintended code in the query engine. You need to upgrade to the patched engine version immediately if you're running Neptune 1.2.0.0 or later.
source: [aws/security-bulletin]