CVE-2026-120066: Medium severity debian/psqlodbc vulnerability
On Unix-like systems, when logging is enabled, psqlODBC creates its log files in /tmp by default, named from the program name, user name, and process ID, with the default permissions, typically world-readable, and follows symbolic links when opening them. A local user can read query text and data from another user's logs, and can place a symbolic link at the predictable path so that the driver appends log data to a file of the attacker's choosing with the victim's privileges. Versions before psqlODBC 18.00.0006 are affected.
Affected Software
Event History
Frequently Asked Questions
Which systems are exposed?
The issue applies to psqlODBC versions before 18.00.0006 on Unix-like systems when driver logging is enabled. The affected software listings include Ubuntu and Debian psqlODBC packages.
What level of access does an attacker need?
An attacker needs local access to the Unix-like system. They can use the predictable /tmp log-file path to read another user's logs or place a symbolic link before the driver opens the log.
What is the potential impact?
Logs may expose query text and data to other local users because the default permissions are typically world-readable. A symbolic-link attack can cause the driver to append log data to an attacker-chosen file with the victim's privileges.