An authenticated user could exfiltrate arbitrary secrets by exploiting incorrect privileges in the Athena ClickHouse connector deployment template before the fix.
A vulnerability in the Athena Synapse connector could return unintended data when querying tables with specific names, according to an AWS advisory published on July 17, 2026.
