Insufficient Authentication Security in Amazon Athena ODBC Driver

CVE-2026-35561

What is CVE-2026-35561?

The Amazon Athena ODBC driver prior to version 2.1.0.0 contains insufficient authentication security controls in its browser-based authentication components. This vulnerability may expose authentication sessions to threat actors, allowing them to potentially intercept or hijack these sessions due to inadequate security measures within the authentication flow. Users are advised to upgrade to version 2.1.0.0 to mitigate this risk and enhance the security of their authentication processes.

References