CVE-2026-120066

A flaw was found in postgresql-odbc. This issue leads to information disclosure and potential unauthorized file modification due to insecure log file creation in shared temporary directories. When logging is enabled on Unix-like systems, the driver creates world-readable log files with predictable names and follows symbolic links. A local attacker can exploit this flaw to view sensitive database query data from other users or place symbolic links to append log data to arbitrary files with the privileges of the victim.

Red Hat rates this vulnerability as having a Moderate impact because exploitation requires local system access and logging is not enabled by default in standard configurations. Under typical Red Hat Enterprise Linux deployments, diagnostic tracing in the PostgreSQL ODBC driver must be explicitly activated by an administrator or user. Furthermore, standard RHEL kernel protections against symlink traversal in sticky world-writable directories limit arbitrary file tampering, confining the residual risk to potential information disclosure of queries when debug tracing is turned on.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Disable driver logging in ODBC configurations.

1. Ensure that logging options are disabled in the system-wide /etc/odbc.ini or user-specific ~/.odbc.ini configuration files by setting:

CommLog = 0
Debug = 0

Alternatively, ensure connection strings passed by client applications do not enable CommLog or Debug.

2. Caveat: Disabling these parameters prevents generating diagnostic traces and communication logs, which may hinder troubleshooting PostgreSQL database connection issues.

3. Warning: Applications holding active ODBC database connections must be restarted for configuration changes to take effect.