{"schemaVersion":2,"id":"CVE-2026-110812","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions to execute arbitrary code and access internal service credentials.\n\n\n\nTo remediate this issue, users not enrolled in auto-update should upgrade to Amazon Neptune engine version 1.5.0.0.(Backports to 1.4.8.1 and 1.4.7.1)","dates":{"published":"2026-10-15T16:34:03.381Z","modified":"2026-10-15T18:20:19.757Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.9,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":9.4,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":9.9,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":9.4,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.9,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-502","name":"Deserialization of Untrusted Data","description":"The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/502.html","capec":[{"id":"CAPEC-586","name":"Object Injection","url":"https://capec.mitre.org/data/definitions/586.html"}],"techniques":[],"countermeasures":[]},{"id":"CWE-918","name":"Server-Side Request Forgery (SSRF)","description":"The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/918.html","capec":[{"id":"CAPEC-664","name":"Server Side Request Forgery","url":"https://capec.mitre.org/data/definitions/664.html"}],"techniques":[],"countermeasures":[]}],"ttp":{"capecs":[{"id":"CAPEC-586","name":"Object Injection","url":"https://capec.mitre.org/data/definitions/586.html","weaknessIds":["CWE-502"],"techniqueIds":[]},{"id":"CAPEC-664","name":"Server Side Request Forgery","url":"https://capec.mitre.org/data/definitions/664.html","weaknessIds":["CWE-918"],"techniqueIds":[]}],"techniques":[],"countermeasures":[],"countermeasuresByTactic":[]},"affected":[{"vendor":"aws","product":"amazon neptune engine","name":"Amazon Neptune Engine","label":"amazon neptune engine","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.2.0.0, < 1.5.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.2.0.0, < 1.5.0.0","eol":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://docs.aws.amazon.com/neptune/latest/userguide/engine-releases-1.5.0.0.html","label":"docs.aws.amazon.com/neptune/latest/userguide/engine-releases-1.5.0.0.html","hostname":"docs.aws.amazon.com","tags":["Patch"]},{"url":"https://docs.aws.amazon.com/neptune/latest/userguide/engine-releases-1.4.7.1.html","label":"docs.aws.amazon.com/neptune/latest/userguide/engine-releases-1.4.7.1.html","hostname":"docs.aws.amazon.com","tags":["Patch"]},{"url":"https://docs.aws.amazon.com/neptune/latest/userguide/engine-releases-1.4.8.1.html","label":"docs.aws.amazon.com/neptune/latest/userguide/engine-releases-1.4.8.1.html","hostname":"docs.aws.amazon.com","tags":["Patch"]},{"url":"https://aws.amazon.com/security/security-bulletins/2026-136-aws/","label":"aws.amazon.com/security/security-bulletins/2026-136-aws/","hostname":"aws.amazon.com","tags":["Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-10-15T16:34:03.381Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-15T18:20:19.757Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-15T23:04:26.095Z","stale":false,"partial":false}}