Local File Exposure in psqlODBC Affects PostgreSQL Database Drivers

CVE-2026-120066

What is CVE-2026-120066?

On Unix-like systems, when logging is enabled, psqlODBC stores log files in /tmp by default. These logs are named after the program name, user name, and process ID, inheriting the default permissions, which typically make them world-readable. This vulnerability allows a local user access to another user's logs, revealing query texts and data. Additionally, an attacker can exploit this by creating a symbolic link at a predictable path, enabling the driver to append log data to a file of the attacker's choosing, thus exposing sensitive information with the victim’s privileges.

References