UBUNTU-CVE-2026-120066: Medium severity ubuntu/psqlodbc vulnerability
On Unix-like systems, when logging is enabled, psqlODBC creates its log files in /tmp by default, named from the program name, user name, and process ID, with the default permissions, typically world-readable, and follows symbolic links when opening them. A local user can read query text and data from another user's logs, and can place a symbolic link at the predictable path so that the driver appends log data to a file of the attacker's choosing with the victim's privileges. Versions before psqlODBC 18.00.0006 are affected.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
psqlODBCto a version that resolves this vulnerability.Fixed in 18.00.0006
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users of affected psqlODBC versions on multi-user Unix-like systems are exposed when psqlODBC logging is enabled. A separate local user on the same system can target another user's log files.
What access does an attacker need?
The attacker needs local access to the Unix-like system and must be able to predict or create the relevant path in /tmp. No user interaction is required once logging is enabled and the vulnerable driver opens its log file.
What should be done if an upgrade cannot be applied immediately?
Disable psqlODBC logging where possible to prevent creation of the vulnerable log files. Also treat existing psqlODBC logs in /tmp as potentially exposed to other local users.
Which versions need remediation?
psqlODBC versions before 18.00.0006 are affected. Upgrade to 18.00.0006 or a later version.