---
id: "CVE-2026-110812"
kind: "vulnerability"
aliases: ["CVE-2026-110812"]
title: "Amazon Neptune: Gremlin import lets an authenticated query user run code"
severity: "critical"
cvss: 9.9
epss: 0.00365
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["amazon-neptune", "aws", "graph-database", "gremlin", "infrastructure", "lab-disclosure"]
not_affected_if: ["no-untrusted-query-access", "patched-engine-version"]
published_at: "2026-10-15T00:00:00+00:00"
first_seen_at: "2026-10-24T18:56:54+00:00"
updated_at: "2026-10-25T12:38:49+00:00"
sources: [{"source": "lab", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-136-aws/", "first_seen_at": "2026-10-24T18:56:54+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110812", "first_seen_at": "2026-10-24T19:23:38+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-110812", "first_seen_at": "2026-10-25T12:38:49+00:00"}]
---

# Amazon Neptune: Gremlin import lets an authenticated query user run code

Amazon Neptune's Gremlin graph-import path deserializes untrusted input unsafely, a flaw inherited from Apache TinkerPop. An authenticated principal with Neptune query permissions can cause unintended activity inside the query engine environment.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the Neptune DB cluster engine version in the AWS console or with `aws neptune describe-db-clusters --query 'DBClusters[].EngineVersion'`
- Review which principals hold neptune-db query permissions (IAM policies using `neptune-db:*` or `neptune-db:ReadDataViaQuery` / `neptune-db:WriteDataViaQuery`)

## Fix

- Upgrade the Neptune engine to `1.4.7.1`, `1.4.8.1` or `1.5.0.0` matching your engine line
- Until upgraded, restrict neptune-db query permissions to trusted principals only

## Timeline

- 2026-10-24T18:56:54+00:00 lab https://aws.amazon.com/security/security-bulletins/rss/2026-136-aws/ — AWS: CVE-2026-110812 - Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune
- 2026-10-24T19:23:38+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-110812
- 2026-10-25T12:38:49+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-110812

## Documents

- [advisory] AWS: CVE-2026-110812 - Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune https://aws.amazon.com/security/security-bulletins/rss/2026-136-aws/

## From the sources

CVE-2026-110812 - Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune

### CVE-2026-110812 - Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune

Bulletin ID: 2026-136-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/15/2026 09:30 AM PDT

Description:

Amazon Neptune is a fully managed graph database service. We identified CVE-2026-110812, an issue in Apache TinkerPop related to Gremlin functionality used by Amazon Neptune. Under certain conditions, an authenticated principal with Neptune data-plane (query) permissions could submit a request that causes the query engine to process untrusted input unsafely, which could lead to unintended activity within the query engine environment. This issue has been addressed in the engine versions listed below; we recommend customers upgrade.

Impacted versions: >=1.2.0.0

Resolution:

This issue has been addressed in Amazon Neptune engine versions 1.4.7.1, 1.4.8.1 and 1.5.0.0. We recommend upgrading your Amazon Neptune DB cluster to the corresponding patched version for your engine line. Customers with auto minor version upgrade enabled will receive the update during their next maintenance window; customers who manage engine versions manually should upgrade.

Workarounds:

This issue requires an authenticated principal with data-plane access. Until you can upgrade, follow least-privilege practices and grant Neptune neptune-db (query) permissions only to trusted principals. Upgrading your DB cluster to a patched Neptune engine version is the recommended remediation.

References:

- CVE-2026-110812

 Please email aws-security@amazon.com with any security questions or concerns.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_