Package vulnerability, severity high
AWS SDK for pandas (awswrangler) Athena default result location ownership flaw (CVE-2026-118029)
Published , updated
CVE-2026-118029 affects the Athena module of AWS SDK for pandas (awswrangler), which does not verify ownership of the default query result location. A remote user could read Athena query results and tamper with result sets returned to the caller through a pre-created S3 bucket. The issue is fixed in version 3.16.1.
What's affected
- awswrangler (pypi)<3.16.1
What to do
- Upgrade awswrangler to version 3.16.1 or later
- Ensure any forked or derivative code incorporates the fix
- Verify the default Athena result bucket in each account and Region is owned by your own account
- Set an explicit result location or enforce a workgroup result configuration
Check whether you were affected
Pharon tells teams automatically when this affects something they run. To check a machine, run this in Claude Code with the Pharon plugin, in the repository that uses it:
/pharon:check-incident awswrangler-athena-result-location-2026-10References
Notice awswrangler-athena-result-location-2026-10, signed with key feed-prod-2026-10 (Ed25519). The Pharon CLI verifies the signature before using a notice.