HarborGuard / CVE
Back to search
HIGHCVE-2026-35558Published Modified CNA AMZN

CVE-2026-35558: Improper neutralization of special elements in authentication components in Amazon Athena ODBC driver

Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to execute arbitrary code or redirect authentication flows by using specially crafted connection parameters that are processed by the driver during user-initiated authentication. To remediate this issue, users should upgrade to version 2.1.0.0.

Metrics

CVSS v4.0
7.3
Severity
HIGH
Fixed in
2.1.0.0
Affected Products
1
Affected packages
  • Amazon / Amazon Athena ODBC driver
    Fixed in 2.1.0.0
CVSS Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N