---
id: "GHSA-34f4-24c9-rgcm"
kind: "vulnerability"
aliases: ["GHSA-34f4-24c9-rgcm"]
title: "CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas"
severity: "medium"
cvss: null
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["athena", "aws", "data-engineering", "lab-disclosure", "package", "python"]
not_affected_if: ["explicit-result-location", "version-3.16.1-or-later", "workgroup-result-config"]
published_at: "2026-10-28T00:00:00+00:00"
first_seen_at: "2026-10-28T16:04:30+00:00"
updated_at: "2026-10-28T16:06:32+00:00"
sources: [{"source": "lab", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-153-aws/", "first_seen_at": "2026-10-28T16:04:30+00:00"}]
---

# CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas

AWS SDK for pandas (awswrangler) trusts the default Athena query result S3 location without checking who owns it. A remote user who pre-creates that bucket can read Athena query results and tamper with the result sets returned to the caller.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed version with `pip show awswrangler` and look for a version below `3.16.1`.
- Confirm in each AWS account and Region that the default Athena result bucket is owned by your own account.
- Check whether an explicit result location or a workgroup result configuration is already set.

## Fix

- Upgrade awswrangler to `3.16.1` or later.
- Until upgraded, verify the default Athena result bucket in each account and Region is owned by your account, and set an explicit result location or enforce a workgroup result configuration.
- Patch any forked or derivative code to include the fix.

## Timeline

- 2026-10-28T16:04:30+00:00 lab https://aws.amazon.com/security/security-bulletins/rss/2026-153-aws/ — AWS: CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas

## Documents

- [advisory] AWS: CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas https://aws.amazon.com/security/security-bulletins/rss/2026-153-aws/

## From the sources

CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas

### CVE-2026-118029 - Unverified ownership of the default Athena query result location in AWS SDK for pandas

Bulletin ID: 2026-153-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 10/28/2026 08:30 AM PDT

Description:

AWS SDK for pandas (awswrangler) is an open-source Python library that integrates pandas with AWS data services such as Amazon Athena, Amazon S3, and AWS Glue. We identified CVE-2026-118029 in the Athena module, where unverified ownership of the default query result location could allow a remote user to read Athena query results and tamper with result sets returned to the caller via a pre-created S3 bucket.

Impacted versions: awswrangler < 3.16.1

Resolution:

This issue has been addressed in AWS SDK for pandas version 3.16.1, released May 8, 2026. We recommend upgrading to the latest version and ensuring any forked or derivative code is patched to incorporate the new fixes.

Workarounds:

Verify that the default Athena result bucket in each account and Region is owned by your own account, and set an explicit result location or enforce a workgroup result configuration.

References:

- CVE-2026-118029
- GHSA-34f4-24c9-rgcm

Acknowledgement:

We would like to thank Dan Gansel of Upwind Security for collaborating on this issue through the coordinated vulnerability disclosure process.

 Please email aws-security@amazon.com with any security questions or concerns.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_