{"id":"CVE-2026-110812","published":"2026-10-15T17:17:16.110","lastModified":"2026-10-16T19:17:03.750","description":"Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials.\n\n\n\nTo remediate this issue, users not enrolled in auto-update should upgrade to Amazon Neptune engine version 1.5.0.0.(Backports to 1.4.8.1 and 1.4.7.1)","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-502","CWE-918"],"vendors":[],"products":[],"references":[{"url":"https://aws.amazon.com/security/security-bulletins/2026-136-aws/","tags":[]},{"url":"https://docs.aws.amazon.com/neptune/latest/userguide/engine-releases-1.4.7.1.html","tags":[]},{"url":"https://docs.aws.amazon.com/neptune/latest/userguide/engine-releases-1.4.8.1.html","tags":[]},{"url":"https://docs.aws.amazon.com/neptune/latest/userguide/engine-releases-1.5.0.0.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A critical deserialization vulnerability in Amazon Neptune's Gremlin graph import component allows authenticated attackers to execute arbitrary code and access internal credentials. This represents a severe privilege escalation risk that could lead to full system compromise.","exploitability":"Exploitation requires an authenticated user with standard database permissions, making it moderately difficult but achievable through legitimate database access, with no additional preconditions beyond existing database access.","blast_radius":"If exploited, this vulnerability could allow attackers to execute arbitrary code on the Neptune service and access internal service credentials, potentially leading to lateral movement and data exfiltration across the AWS environment.","remediation":"Upgrade to Amazon Neptune engine version 1.5.0.0, with backports available to 1.4.8.1 and 1.4.7.1","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","deserialization","database"],"model":"garnet-coder","analyzedAt":"2026-10-16T08:45:20.056Z"}}