CVE-2026-120060
Awaiting Analysis Awaiting Analysis - Queue

psqlODBC Remote Code Execution via Server-Supplied Data

Publication date: 2026-11-02

Last updated on: 2026-11-02

Assigner: PostgreSQL

Description
psqlODBC trusts counts and lengths in server data in three places. SQLBulkOperations uses a server-supplied row count in a size subtraction that can underflow. SQLStatistics iterates index keys using a server-supplied key count without bounding it to the fixed storage. Bytea octal decoding reads up to two bytes past the end of a truncated escape sequence. A server not trusted under current SSL settings can crash the client or make it read out of bounds. Versions before psqlODBC 18.00.0006 are affected.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-02
Last Modified
2026-11-02
Generated
2026-11-02
AI Q&A
2026-11-02
EPSS Evaluated
N/A
NVD
CVE-2026-120060

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
PostgreSQL psqlODBC 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.
CWE-191 The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in psqlODBC involves three issues where the client trusts server-supplied data without proper validation. SQLBulkOperations can underflow due to unchecked row counts, SQLStatistics may read past fixed storage using unchecked key counts, and bytea octal decoding can read past the end of truncated escape sequences. A malicious server could crash the client or cause out-of-bounds reads.

Detection Guidance

Detection involves checking the psqlODBC version. Run 'psqlodbc --version' to verify if it is below 18.00.0006. If so, the system is vulnerable.

Impact Analysis

An attacker controlling a database server could exploit this to crash your application or read sensitive memory, potentially leading to data leaks or denial of service. The impact depends on how psqlODBC is used in your environment.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR or HIPAA as it pertains to a client-side crash or out-of-bounds read in psqlODBC when interacting with untrusted servers. Compliance risks would arise only if exploitation led to data breaches or unauthorized access, which is not specified in the provided context.

Mitigation Strategies

Upgrade psqlODBC to version 18.00.0006 or later. Avoid connecting to untrusted PostgreSQL servers over unencrypted connections.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-120060. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...