Bug 2565359 (CVE-2026-120066)

Summary: CVE-2026-120066 postgresql-odbc: postgresql-odbc: Information disclosure via insecure temporary log file creation
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security DevOps Team <prodsec-dev>
Status: NEW --- QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: rhel-process-autobot, watson-tool-maintainers
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in postgresql-odbc. This issue leads to information disclosure and potential unauthorized file modification due to insecure log file creation in shared temporary directories. When logging is enabled on Unix-like systems, the driver creates world-readable log files with predictable names and follows symbolic links. A local attacker can exploit this flaw to view sensitive database query data from other users or place symbolic links to append log data to arbitrary files with the privileges of the victim.
 Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2566769, 2566770, 2566771    
Bug Blocks:    

Description OSIDB Bzimport 2026-11-02 19:32:56 UTC 
On Unix-like systems, when logging is enabled, psqlODBC creates its log files in /tmp by default, named from the program name, user name, and process ID, with the default permissions, typically world-readable, and follows symbolic links when opening them. A local user can read query text and data from another user's logs, and can place a symbolic link at the predictable path so that the driver appends log data to a file of the attacker's choosing with the victim's privileges. Versions before psqlODBC 18.00.0006 are affected.