UBUNTU-CVE-2026-120062: High severity ubuntu/psqlodbc vulnerability
SQLSpecialColumns in psqlODBC splices the table and schema names it receives into its catalog query without escaping them, while the other catalog functions escape them. An application that passes an untrusted table or schema name to SQLSpecialColumns lets the caller execute arbitrary SQL with the privileges of the connection. Versions before psqlODBC 18.00.0006 are affected.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
psqlODBCto a version that resolves this vulnerability.Fixed in 18.00.0006
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Applications using psqlODBC versions before 18.00.0006 are exposed if they call SQLSpecialColumns with table or schema names influenced by untrusted input. The impact is limited to the privileges of the database connection used by the application.
What does an attacker need to exploit it?
An attacker needs a way to supply or control a table name or schema name that the application passes to SQLSpecialColumns. No user interaction is required, but the attacker must have the necessary application-level access to reach that code path.
Are other psqlODBC catalog functions affected?
The available information identifies SQLSpecialColumns as the affected function. It states that other catalog functions escape table and schema names.
What is the remediation?
Upgrade psqlODBC to version 18.00.0006 or later. If an immediate upgrade is not possible, prevent untrusted values from being passed as table or schema names to SQLSpecialColumns and constrain the privileges of database connections that may invoke it.