CVE-2026-110812 - Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune
Amazon Neptune ยท 2026-10-15
Actions
Technical Details
| Affected Versions | >=1.2.0.0 |
|---|---|
| Regions | all |
| CVE IDs | CVE-2026-110812 |
| Migration Required | Yes |
| Cost Impact | Neutral |
| IaC Impact | High |
What This Means
For DevOps Teams
Update your Amazon Neptune DB cluster to engine versions 1.4.7.1, 1.4.8.1, or 1.5.0.0 to remediate the deserialization issue in the Gremlin graph-import path (CVE-2026-110812).
For Platform Teams
Deploy the patched Neptune engine versions to your graph database clusters to resolve the security vulnerability and maintain a secure environment.
For Executives
Implement the recommended Neptune engine upgrade to address the security vulnerability and ensure the integrity of your graph database environment.