The vulnerability is an incorrect privilege assignment in the ClickHouse connector deployment template for Amazon Athena Federated Query. A flaw allows an authenticated user to read any AWS Secrets Manager secret in the deploying account. The weakness is a relativized permission grant (CWE-266). If an attacker controls the connector’s connection string, they can point it at an arbitrary secret and a database endpoint under their control, causing the connector to transmit that secret to the attacker’s endpoint, thus exposing sensitive data.

This issue affects users of the AWS Athena Federated Query ClickHouse Connector deployment template before version v2026.17.1. Any deployment using the older template is vulnerable unless a forked or derivative version has been patched.

The CVSS score of 7.1 indicates moderate to high severity. EPSS data is not available, so the probability of exploitation is uncertain, but the flaw is not listed in the CISA KEV catalog. The attack requires an authenticated remote user who can modify or redeploy the connector; thus the attack vector is limited to legitimate users with appropriate deployment privileges. Organizations should assess whether their deployment practices allow such users or depend on customer-managed credentials to mitigate the risk.