CVE-2026-35560

Name of the Vulnerable Software and Affected Versions Amazon Athena ODBC driver versions prior to 2.1.0.0

Description Improper certificate validation in the identity provider connection components may allow a man-in-the-middle threat actor to intercept authentication credentials. This occurs due to insufficient default transport security when connecting to external identity providers. This issue does not affect connections made directly to Athena.

Recommendations Update to version 2.1.0.0.