CVE-2026-118029

Vendor

AWS

Product

aws-sdk-pandas

CVSS v3.1

5.9 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N

Weakness

CWE-283

Exposure class

Cloud platform, Developer platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 27
   AWS bulletin AWS 3d ago

   CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas

   Bulletin ID: 2026-153-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/28/2026 08:30 AM PDT Description: AWS SDK for pandas (awswrangler) is an open-source Python library that integrates pandas…

   CVE-2026-118029 Amazon Web Services
2. 15
   CVE NVD 3d ago

   Unverified ownership of the default query result location in the Athena module in AWS SDK for pandas (awswrangler) before 3.16.1 might allow remote…

   Unverified ownership of the default query result location in the Athena module in AWS SDK for pandas (awswrangler) before 3.16.1 might allow remote actors to read Athena query results and tamper with result sets returned to the…

   CVSS 5.9 Fix available CVE-2026-118029 AWS