Vulnerability · Published Nov 2, 2026 · Assigned by PostgreSQL
CVE-2026-120066psqlODBC log files are created with default permissions at a predictable path and follow symbolic links
Medium 5.3
In plain English
A medium-severity incorrect permission assignment in psqlODBC from PostgreSQL. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
On Unix-like systems, when logging is enabled, psqlODBC creates its log files in /tmp by default, named from the program name, user name, and process ID, with the default permissions, typically world-readable, and follows symbolic links when opening them. A local user can read query text and data from another user's logs, and can place a symbolic link at the predictable path so that the driver appends log data to a file of the attacker's choosing with the victim's privileges. Versions before psqlODBC 18.00.0006 are affected.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | psqlodbc | no fix listed | DEBIAN-CVE-2026-120066 |
| Debian:13 | psqlodbc | no fix listed | DEBIAN-CVE-2026-120066 |
| Debian:14 | psqlodbc | 1:18.00.0006-1 | DEBIAN-CVE-2026-120066 |
| Ubuntu:22.04:LTS | psqlodbc | no fix listed | UBUNTU-CVE-2026-120066 |
| Ubuntu:24.04:LTS | psqlodbc | no fix listed | UBUNTU-CVE-2026-120066 |
| Ubuntu:26.04:LTS | psqlodbc | no fix listed | UBUNTU-CVE-2026-120066 |
| Ubuntu:26.10 | psqlodbc | no fix listed | UBUNTU-CVE-2026-120066 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| PostgreSQL | psqlODBC | 0 – before 18.00.0006 |
Weakness: CWE-732, CWE-59 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N