CVE-2026-120062

SQLSpecialColumns in psqlODBC splices the table and schema names it receives into its catalog query without escaping them, while the other catalog functions escape them. An application that passes an untrusted table or schema name to SQLSpecialColumns lets the caller execute arbitrary SQL with the privileges of the connection. Versions before psqlODBC 18.00.0006 are affected.

• CWE-89

• https://github.com/postgresql-interfaces/psqlodbc/security/advisories/GHSA-gg8f-fx3w-rj33

Published

Nov 2, 2026

Last Modified

Nov 2, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-12005IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Ver…7.2
• CVE-2026-120057psqlODBC copies the reply to a large-object read (loread) in…7.5
• CVE-2026-120058psqlODBC sizes its row cache from the column count of a curs…7.5
• CVE-2026-120059For an updatable cursor over a table without OIDs that has a…6.8
• CVE-2026-120060psqlODBC trusts counts and lengths in server data in three p…5.9
• CVE-2026-120061The psqlODBC parser for ODBC escape sequences in application…7.5
• CVE-2026-120063When psqlODBC quotes a schema or table name into a 128-byte …5.9
• CVE-2026-120064Several psqlODBC entry points use an application-supplied co…7.5
• CVE-2026-120065For an updatable cursor over a table without OIDs that has a…7.1
• CVE-2026-120066On Unix-like systems, when logging is enabled, psqlODBC crea…5.3
• CVE-2026-120067For updatable cursors, which are enabled by default, psqlODB…5.9
• CVE-2026-12007Use after free in Core in Google Chrome on Windows prior to …8.8