CVE-2026-5485 in Athena ODBC Driver
摘要 (英语)
OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on Linux might allow a threat actor to execute arbitrary code by using specially crafted connection parameters that are loaded by the driver during a local user-initiated connection.
To remediate this issue, users should upgrade to version 2.0.5.1 or later.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
负责
AMZN
预定
2026-04-03
披露
2026-04-04
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 355205 | Amazon Athena ODBC Driver Browser-based Authentication 权限提升 | 78 | 未定义 | 官方修复 | CVE-2026-5485 |