PT-2026-30217 · Amazon · Amazon Athena Odbc Driver+1

Jann Horn

·

CVE-2026-35558

·

Published

2026-04-03

·

Updated

2026-04-03

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Amazon Athena ODBC driver versions prior to 2.1.0.0
Description Improper neutralization of special elements in the authentication components may allow a threat actor to execute arbitrary code or redirect authentication flows. This occurs when the driver processes specially crafted connection parameters during user-initiated authentication.
Recommendations Update to version 2.1.0.0.

Fix

Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2026-35558

Affected Products

Amazon Athena Odbc Driver
Athena Odbc