JDBC Driver: Local Arbitrary Code Execution (CVE-2026-126823)

The JDBC driver contains a vulnerability (CVE-2026-126823) in its native library loading routine that allows a local user to perform arbitrary code execution. An attacker with standard user privileges on the same host can place a malicious file into a shared temporary location. When a Java application loads the JDBC driver class, the native library loading routine accepts and loads the malicious file without origin verification, resulting in code execution within the context of the application process.

Impact

Successful exploitation allows an unprivileged local attacker to run arbitrary code with the permissions of the Java application process. This may result in the unauthorized disclosure or alteration of data managed by the application or cause the application to become unavailable (denial of service). The vulnerability carries a CVSS v3.1 base score of 7.0.

Recommendation

Identify all Java applications utilizing the affected JDBC driver within your environment. Monitor for any unauthorized file creation or modification events within shared temporary directories that are known to be used by these application processes. Consult the vendor documentation for updates or configuration changes that restrict native library loading locations.