{"id":"CVE-2026-108096","kind":"vulnerability","aliases":["CVE-2026-108096"],"related":[],"title":"AWS Amplify GraphQL: crafted queries read other users' records in SQL-backed models","description":"CVE-2026-108096: Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category\n\n### CVE-2026-108096: Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category\n\nBulletin ID: 2026-133-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/09/2026 11:00 AM PDT\n\nDescription:\n\nAWS Amplify API Category is a CDK Construct library for defining GraphQL data models with authorization rules as AWS AppSync APIs. We identified CVE-2026-108096, where improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer might allow an authenticated remote user to read records owned by other users of the same application via crafted queries.\n\nImpacted versions:\n\n- @aws-amplify/graphql-index-transformer >=2.2.0, <3.1.2;\n- @aws-amplify/graphql-api-construct >=1.4.0, <1.21.4;\n- @aws-amplify/data-construct <1.17.4\n\nResolution:\n\nThis issue has been addressed in @aws-amplify/graphql-index-transformer 3.1.2 (included in @aws-amplify/data-construct 1.17.4 and @aws-amplify/graphql-api-construct 1.21.4). We recommend upgrading to the latest version ensuring any forked or derivative code is patched to incorporate the new fixes and then redeploying their backend.\n\nWorkarounds:\n\nNo workarounds are available.\n\nReferences:\n\n- CVE-2026-108096\n- GHSA-69c4-mvf5-5xm3\n\n Please email aws-security@amazon.com with any security questions or concerns.","summary":"Query resolvers generated by the Amplify GraphQL index transformer fail to check authorization properly for SQL-backed models. An authenticated user can read records owned by other users of the same application through crafted queries.","severity":"high","cvss":7.1,"epss":0.00299,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["aws","aws-amplify","aws-appsync","graphql","lab-disclosure","package","self-hosted","sql"],"not_affected_if":["no-amplify-graphql","unaffected-versions"],"how_to_check":"- Check the installed versions of `@aws-amplify/graphql-index-transformer`, `@aws-amplify/graphql-api-construct` and `@aws-amplify/data-construct` in the backend's lockfile, e.g. `npm ls @aws-amplify/graphql-index-transformer`\n- Confirm whether the backend uses SQL-backed models (unknown from the sources whether this changes exposure)","fix":"- Upgrade `@aws-amplify/graphql-index-transformer` to `3.1.2` or later\n- Upgrade `@aws-amplify/graphql-api-construct` to `1.21.4` or later\n- Upgrade `@aws-amplify/data-construct` to `1.17.4` or later\n- Redeploy the backend after upgrading; patch any forked or derivative code too (no workarounds are available)","status":"open","published_at":"2026-10-09T18:17:06+00:00","first_seen_at":"2026-10-24T19:28:16+00:00","triaged_at":"2026-10-25T03:36:53+00:00","updated_at":"2026-10-25T12:38:49+00:00","category":"package","confidence":0.8,"triage":{"at":"2026-10-25T03:36:53Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade `@aws-amplify/graphql-index-transformer` to `3.1.2` or later\n- Upgrade `@aws-amplify/graphql-api-construct` to `1.21.4` or later\n- Upgrade `@aws-amplify/data-construct` to `1.17.4` or later\n- Redeploy the backend after upgrading; patch any forked or derivative code too (no workarounds are available)","reach":"internet","title":"AWS Amplify GraphQL: crafted queries read other users' records in SQL-backed models","impact":"medium","summary":"Query resolvers generated by the Amplify GraphQL index transformer fail to check authorization properly for SQL-backed models. An authenticated user can read records owned by other users of the same application through crafted queries.","category":"package","nicknames":[],"who_cares":["aws-amplify","graphql","aws-appsync","sql","self-hosted"],"confidence":0.8,"needs_auth":"yes","worst_case":"Authenticated users read other users' records in the same application.","analyst_note":"","how_to_check":"- Check the installed versions of `@aws-amplify/graphql-index-transformer`, `@aws-amplify/graphql-api-construct` and `@aws-amplify/data-construct` in the backend's lockfile, e.g. `npm ls @aws-amplify/graphql-index-transformer`\n- Confirm whether the backend uses SQL-backed models (unknown from the sources whether this changes exposure)","needs_analyst":false,"not_affected_if":["unaffected-versions","no-amplify-graphql"],"who_is_affected":"Teams whose AWS Amplify backend defines GraphQL data models with authorization rules and uses the affected constructs or transformer versions. The flaw lets an authenticated user read records that belong to other users of the same application. Applications on versions outside the listed ranges, or that do not use these packages, are not affected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000735,"input_tokens":3892,"output_tokens":692,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-108096':17A,20A,75C,93C,154C,265C '-133':112C '-2026':16A,19A,74C,92C,153C,264C '/data-construct':205C,224C '/graphql-api-construct':199C,230C '/graphql-index-transformer':167C,193C,217C '00':125C '1.17.4':206C,225C '1.21.4':201C,231C '1.4.0':200C '10/09/2026':123C '11':124C '2.2.0':194C '2026':111C '3.1.2':195C,218C '5xm3':270C '69c4':268C 'address':212C 'allow':169C 'amplifi':2A,24B,42B,88C,106C,130C,166C,192C,198C,204C,216C,223C,229C 'api':89C,107C,131C,149C 'applic':69B,184C 'appsync':27B,148C 'attent':120C 'authent':57B,171C 'author':49B,77C,95C,144C,157C 'avail':261C 'aw':1A,21B,23B,26B,87C,105C,113C,115C,129C,147C,165C,191C,197C,203C,215C,222C,228C 'aws-amplifi':22B,164C,190C,196C,202C,214C,221C,227C 'aws-appsync':25B 'aws-security@amazon.com':273C 'back':13A,54B,84C,102C 'backend':256C 'bulletin':109C 'categori':90C,108C,132C 'cdk':135C 'check':48B 'code':244C 'concern':279C 'construct':136C 'content':116C 'craft':4A,71B,186C 'cve':15A,18A,73C,91C,152C,263C 'data':141C 'date':122C 'defin':139C 'deriv':243C 'descript':128C 'disclosur':31B 'email':272C 'ensur':239C 'fail':46B 'fix':251C 'fork':241C 'generat':39B,162C 'ghsa':267C 'ghsa-69c4-mvf5-5xm3':266C 'graphql':3A,28B,43B,140C 'host':35B 'id':110C 'identifi':151C 'impact':188C 'import':118C 'improp':76C,94C,156C 'includ':219C 'incorpor':248C 'index':44B 'issu':209C 'lab':30B 'lab-disclosur':29B 'latest':237C 'librari':137C 'might':168C 'model':14A,55B,85C,103C,142C 'mvf5':269C 'new':250C 'own':62B,177C 'packag':32B 'patch':246C 'pdt':127C 'pleas':271C 'proper':50B 'public':121C 'queri':5A,37B,72B,79C,97C,160C,187C 'question':277C 'read':6A,60B,175C 'recommend':233C 'record':9A,61B,176C 'redeploy':254C 'refer':262C 'remot':172C 'requir':119C 'resolut':207C 'resolv':38B,80C,98C,161C 'rule':145C 'scope':114C 'secur':276C 'self':34B 'self-host':33B 'sql':12A,36B,53B,83C,101C 'sql-back':11A,52B,82C,100C 'transform':45B 'type':117C 'upgrad':234C 'user':8A,58B,65B,173C,180C 'version':189C,238C 'via':185C 'workaround':257C,259C","nicknames":[],"mitigations":[],"who_affected":"Teams whose AWS Amplify backend defines GraphQL data models with authorization rules and uses the affected constructs or transformer versions. The flaw lets an authenticated user read records that belong to other users of the same application. Applications on versions outside the listed ranges, or that do not use these packages, are not affected.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-09T18:17:06+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"ff89ba41-3aa1-4d27-914a-91399e9639e5","poc_count":0,"sources":[{"source":"lab","external_id":"https://aws.amazon.com/security/security-bulletins/rss/2026-133-aws/#CVE-2026-108096","url":"https://aws.amazon.com/security/security-bulletins/rss/2026-133-aws/","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T19:28:16+00:00","fetched_at":"2026-10-25T05:26:30+00:00","note":"AWS: CVE-2026-108096: Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category"},{"source":"nvd","external_id":"CVE-2026-108096","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108096","severity":null,"published_at":"2026-10-09T18:17:06+00:00","modified_at":"2026-10-20T19:17:24+00:00","first_seen_at":"2026-10-24T20:15:27+00:00","fetched_at":"2026-10-24T20:15:27+00:00","note":null},{"source":"epss","external_id":"CVE-2026-108096","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-108096","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-25T12:38:49+00:00","fetched_at":"2026-10-25T12:38:49+00:00","note":null}],"documents":[{"id":2950,"url":"https://aws.amazon.com/security/security-bulletins/rss/2026-133-aws/","title":"AWS: CVE-2026-108096: Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category","kind":"advisory","source":"lab","text":"CVE-2026-108096: Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category\n\n### CVE-2026-108096: Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category\n\nBulletin ID: 2026-133-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/09/2026 11:00 AM PDT\n\nDescription:\n\nAWS Amplify API Category is a CDK Construct library for defining GraphQL data models with authorization rules as AWS AppSync APIs. We identified CVE-2026-108096, where improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer might allow an authenticated remote user to read records owned by other users of the same application via crafted queries.\n\nImpacted versions:\n\n- @aws-amplify/graphql-index-transformer >=2.2.0, <3.1.2;\n- @aws-amplify/graphql-api-construct >=1.4.0, <1.21.4;\n- @aws-amplify/data-construct <1.17.4\n\nResolution:\n\nThis issue has been addressed in @aws-amplify/graphql-index-transformer 3.1.2 (included in @aws-amplify/data-construct 1.17.4 and @aws-amplify/graphql-api-construct 1.21.4). We recommend upgrading to the latest version ensuring any forked or derivative code is patched to incorporate the new fixes and then redeploying their backend.\n\nWorkarounds:\n\nNo workarounds are available.\n\nReferences:\n\n- CVE-2026-108096\n- GHSA-69c4-mvf5-5xm3\n\n Please email aws-security@amazon.com with any security questions or concerns.","published_at":null,"relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}