7.8
High
CVE-2026-35558 Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0…
Description
Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to execute arbitrary code or redirect authentication flows by using specially crafted connection parameters that are processed by the driver during user-initiated authentication. To remediate this issue, users should upgrade to version 2.1.0.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Amazon Athena ODBC driver 2.1 | earliest → < 2.1.0.0 | 2.1.0.0 |
Other CVEs of Amazon Athena ODBC driver
The 6 CVEs of Amazon Athena ODBC driver →
CVE-2026-35559
Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a…
6.5
Medium
CVE-2026-5485
OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on…
7.8
High
CVE-2026-35562
Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow…
7.5
High
CVE-2026-35561
Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC…
7.4
High