7.8
High
CVE-2026-5485 OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on…
Description
OS command injection in the browser-based authentication component in Amazon Athena ODBC driver before 2.0.5.1 on Linux might allow a threat actor to execute arbitrary code by using specially crafted connection parameters that are loaded by the driver during a local user-initiated connection. To remediate this issue, users should upgrade to version 2.0.5.1 or later.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Amazon Athena ODBC driver 2.0 | earliest → < 2.0.5.1 | 2.0.5.1 |
Other CVEs of Amazon Athena ODBC driver
The 6 CVEs of Amazon Athena ODBC driver →
CVE-2026-35558
Improper neutralization of special elements in the authentication components in Amazon Athena ODBC driver before 2.1.0.0…
7.8
High
CVE-2026-35559
Out-of-bounds write in the query processing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a…
6.5
Medium
CVE-2026-35562
Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow…
7.5
High
CVE-2026-35561
Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC…
7.4
High