{"id":"CVE-2026-118029","kind":"vulnerability","aliases":["CVE-2026-118029"],"related":[],"title":"Unverified ownership of the default query result location in the Athena module in AWS SDK for pandas (awswrangler)…","description":"CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas\n\n### CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas\n\nBulletin ID: 2026-153-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/28/2026 08:30 AM PDT\n\nDescription:\n\nAWS SDK for pandas (awswrangler) is an open-source Python library that integrates pandas with AWS data services such as Amazon Athena, Amazon S3, and AWS Glue. We identified CVE-2026-118029 in the Athena module, where unverified ownership of the default query result location could allow a remote user to read Athena query results and tamper with result sets returned to the caller via a pre-created S3 bucket.\n\nImpacted versions: awswrangler < 3.16.1\n\nResolution:\n\nThis issue has been addressed in AWS SDK for pandas version 3.16.1, released May 8, 2026. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.\n\nWorkarounds:\n\nVerify that the default Athena result bucket in each account and Region is owned by your own account, and set an explicit result location or enforce a workgroup result configuration.\n\nReferences:\n\n- CVE-2026-118029\n- GHSA-34f4-24c9-rgcm\n\nAcknowledgement:\n\nWe would like to thank Dan Gansel of Upwind Security for collaborating on this issue through the coordinated vulnerability disclosure process.\n\n Please email aws-security@amazon.com with any security questions or concerns.","summary":"AWS SDK for pandas (awswrangler) does not verify that the default Athena query result S3 bucket belongs to the caller's account. A remote user who pre-creates that bucket can read Athena query results and alter result sets returned to the calling code.","severity":"high","cvss":5.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["athena","aws","data-engineering","lab-disclosure","package","python"],"not_affected_if":["explicit-result-location","not-using-athena","workgroup-result-config"],"how_to_check":"- Run `pip show awswrangler` and compare the version to `3.16.1`.\n- Check whether the code relies on the default Athena result location rather than an explicit `s3_output` or a workgroup result configuration.\n- Confirm in the AWS console or CLI that the default Athena result bucket for each account and Region is owned by your account.","fix":"- Upgrade awswrangler to `3.16.1` or later.\n- Patch any forked or vendored copies of the library.\n- Until upgraded, set an explicit result location or enforce a workgroup result configuration, and verify the default result bucket is owned by your account.","status":"open","published_at":"2026-10-28T00:00:00+00:00","first_seen_at":"2026-10-28T16:04:30+00:00","triaged_at":"2026-10-28T16:06:32+00:00","updated_at":"2026-10-28T16:33:49+00:00","category":"package","confidence":0.8,"triage":{"at":"2026-10-28T16:06:32Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade awswrangler to `3.16.1` or later.\n- Patch any forked or vendored copies of the library.\n- Until upgraded, set an explicit result location or enforce a workgroup result configuration, and verify the default result bucket is owned by your account.","reach":"unknown","title":"AWS SDK for pandas: Athena result bucket ownership unchecked, results readable and tamperable","impact":"medium","summary":"AWS SDK for pandas (awswrangler) does not verify that the default Athena query result S3 bucket belongs to the caller's account. A remote user who pre-creates that bucket can read Athena query results and alter result sets returned to the calling code.","category":"package","nicknames":[],"who_cares":["python","aws","athena","data-engineering"],"confidence":0.8,"needs_auth":"unknown","worst_case":"Attacker reads Athena query results and tampers with returned result sets","analyst_note":"","how_to_check":"- Run `pip show awswrangler` and compare the version to `3.16.1`.\n- Check whether the code relies on the default Athena result location rather than an explicit `s3_output` or a workgroup result configuration.\n- Confirm in the AWS console or CLI that the default Athena result bucket for each account and Region is owned by your account.","needs_analyst":false,"not_affected_if":["explicit-result-location","workgroup-result-config","not-using-athena"],"who_is_affected":"Teams running awswrangler below `3.16.1` that use Amazon Athena through the default query result location. The exposure depends on the default result bucket being pre-created by someone else, so teams that set an explicit result location or enforce a workgroup result configuration are less exposed. Teams not using Athena through this library can skip it.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000698,"input_tokens":3822,"output_tokens":632,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-118029':21A,24A,82C,99C,166C,282C '-153':117C '-2026':20A,23A,81C,98C,165C,281C '08':129C '10/28/2026':128C '2026':116C,226C '24c9':286C '3.16.1':209C,222C '30':130C '34f4':285C '8':225C 'account':56B,258C,266C 'acknowledg':288C 'address':215C 'allow':181C 'alter':72B 'amazon':155C,157C 'athena':11A,25B,46B,68B,88C,105C,156C,169C,187C,253C 'attent':125C 'aw':14A,26B,35B,93C,110C,118C,120C,134C,150C,160C,217C 'aws-security@amazon.com':312C 'awswrangl':18A,39B,138C,208C 'belong':51B 'bucket':50B,65B,205C,255C 'bulletin':114C 'call':78B 'caller':54B,198C 'code':79B,240C 'collabor':300C 'concern':318C 'configur':278C 'content':121C 'coordin':306C 'could':180C 'creat':63B,203C 'cve':19A,22A,80C,97C,164C,280C 'dan':294C 'data':28B,151C 'data-engin':27B 'date':127C 'default':5A,45B,87C,104C,176C,252C 'deriv':239C 'descript':133C 'disclosur':32B,308C 'email':311C 'enforc':274C 'engin':29B 'ensur':235C 'explicit':270C 'fix':247C 'fork':237C 'gansel':295C 'ghsa':284C 'ghsa-34f4-24c9-rgcm':283C 'glue':161C 'id':115C 'identifi':163C 'impact':206C 'import':123C 'incorpor':244C 'integr':147C 'issu':212C,303C 'lab':31B 'lab-disclosur':30B 'latest':232C 'librari':145C 'like':291C 'locat':8A,91C,108C,179C,272C 'may':224C 'modul':12A,170C 'new':246C 'open':142C 'open-sourc':141C 'own':262C 'ownership':2A,84C,101C,173C 'packag':33B 'panda':17A,38B,96C,113C,137C,148C,220C 'patch':242C 'pdt':132C 'pleas':310C 'pre':62B,202C 'pre-creat':61B,201C 'process':309C 'public':126C 'python':34B,144C 'queri':6A,47B,69B,89C,106C,177C,188C 'question':316C 'read':67B,186C 'recommend':228C 'refer':279C 'region':260C 'releas':223C 'remot':58B,183C 'requir':124C 'resolut':210C 'result':7A,48B,70B,73B,90C,107C,178C,189C,193C,254C,271C,277C 'return':75B,195C 'rgcm':287C 's3':49B,158C,204C 'scope':119C 'sdk':15A,36B,94C,111C,135C,218C 'secur':298C,315C 'servic':152C 'set':74B,194C,268C 'sourc':143C 'tamper':191C 'thank':293C 'type':122C 'unverifi':1A,83C,100C,172C 'upgrad':229C 'upwind':297C 'user':59B,184C 'verifi':42B,249C 'version':207C,221C,233C 'via':199C 'vulner':307C 'workaround':248C 'workgroup':276C 'would':290C","nicknames":[],"mitigations":[],"who_affected":"Teams running awswrangler below `3.16.1` that use Amazon Athena through the default query result location. The exposure depends on the default result bucket being pre-created by someone else, so teams that set an explicit result location or enforce a workgroup result configuration are less exposed. Teams not using Athena through this library can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T00:00:00+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"ff89ba41-3aa1-4d27-914a-91399e9639e5","poc_count":0,"sources":[{"source":"lab","external_id":"https://aws.amazon.com/security/security-bulletins/rss/2026-153-aws/#CVE-2026-118029","url":"https://aws.amazon.com/security/security-bulletins/rss/2026-153-aws/","severity":null,"published_at":"2026-10-28T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-28T16:04:30+00:00","fetched_at":"2026-10-28T16:04:30+00:00","note":"AWS: CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas"},{"source":"nvd","external_id":"CVE-2026-118029","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-118029","severity":null,"published_at":"2026-10-28T16:17:07+00:00","modified_at":"2026-10-28T16:17:07+00:00","first_seen_at":"2026-10-28T16:33:49+00:00","fetched_at":"2026-10-28T16:33:49+00:00","note":null}],"documents":[{"id":11262,"url":"https://aws.amazon.com/security/security-bulletins/rss/2026-153-aws/","title":"AWS: CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas","kind":"advisory","source":"lab","text":"CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas\n\n### CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas\n\nBulletin ID: 2026-153-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/28/2026 08:30 AM PDT\n\nDescription:\n\nAWS SDK for pandas (awswrangler) is an open-source Python library that integrates pandas with AWS data services such as Amazon Athena, Amazon S3, and AWS Glue. We identified CVE-2026-118029 in the Athena module, where unverified ownership of the default query result location could allow a remote user to read Athena query results and tamper with result sets returned to the caller via a pre-created S3 bucket.\n\nImpacted versions: awswrangler < 3.16.1\n\nResolution:\n\nThis issue has been addressed in AWS SDK for pandas version 3.16.1, released May 8, 2026. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.\n\nWorkarounds:\n\nVerify that the default Athena result bucket in each account and Region is owned by your own account, and set an explicit result location or enforce a workgroup result configuration.\n\nReferences:\n\n- CVE-2026-118029\n- GHSA-34f4-24c9-rgcm\n\nAcknowledgement:\n\nWe would like to thank Dan Gansel of Upwind Security for collaborating on this issue through the coordinated vulnerability disclosure process.\n\n Please email aws-security@amazon.com with any security questions or concerns.","published_at":"2026-10-28T00:00:00+00:00","relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}