CVE-2026-5485Published
OS command injection in Amazon Athena ODBC driver on Linux
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-5485 · Microsoft / collected KEV context
cve-program · CVE-2026-5485
- https://aws.amazon.com/security/security-bulletins/2026-013-aws/
- https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Windows/AmazonAthenaODBC-2.1.0.0.msi
- https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Linux/AmazonAthenaODBC-2.1.0.0.rpm
- https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Mac/arm/AmazonAthenaODBC-2.1.0.0_arm.pkg
- https://downloads.athena.us-east-1.amazonaws.com/drivers/ODBC/v2.1.0.0/Mac/Intel/AmazonAthenaODBC-2.1.0.0_x86.pkg
- https://docs.aws.amazon.com/athena/latest/ug/odbc-v2-driver-release-notes.html
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.