bartek@aws: ~/news
$ whoami
$ AWS Architect · DevOps · Cloud
Wednesday, October 28, 2026

AWS SDK for pandas Vulnerability Lets Attackers Read Athena Query Results

AWS SDK for pandas (awswrangler) versions below 3.16.1 have a security issue where unverified S3 bucket ownership could let attackers access your Athena query results and mess with the data. If you're using awswrangler, upgrade to 3.16.1 or later ASAP—this one needs your attention.

source: [aws/security-bulletin]