By vendor

Mariadb vulnerabilities

Known CVEs affecting Mariadb products, prioritized by severity, with SEC.co remediation and detection guidance.

6 published vulnerabilities

• CVE-2026-44168HIGH 8.0

  MariaDB Server has a command injection vulnerability in its data replication process. When a database node joins a cluster using the mariabackup method, the existing node (donor) improperly validates parameters sent by the joining node. A malicious actor with high-level database access could craft malicious parameters to execute arbitrary commands on the donor's server. This affects multiple recent MariaDB versions across the 10.6, 10.11, 11.4, 11.8, and 12.3 release branches.

• CVE-2026-48163HIGH 8.0

  MariaDB servers are vulnerable to arbitrary command execution when two nodes communicate during a state transfer process (SST). An attacker who controls a newly joining node can trick the existing node into running malicious shell commands. This affects multiple MariaDB versions and relies on the rsync method for transferring data between nodes. The vulnerability requires administrative access to initiate the join process, but once exploited, it provides full control over the donor database server.

• CVE-2026-48165HIGH 8.0

  A critical security flaw in MariaDB allows high-privileged database users to execute arbitrary shell commands with the permissions of the MariaDB process on Galera cluster joiner nodes. The vulnerability exists in the wsrep_sst_receive_address and wsrep_sst_donor configuration variables, which can be manipulated by administrative users to break out of the database context. This affects multiple versions across MariaDB's active release lines and requires immediate patching to prevent unauthorized system access.

• CVE-2026-44171MEDIUM 6.3

  MariaDB's mbstream backup utility contains a path traversal vulnerability that could allow an attacker to write files outside the intended backup directory when unpacking a specially crafted archive. The flaw affects multiple MariaDB versions across the 10.6, 10.11, 11.4, 11.8, and 12.3 release branches. An attacker would need local access and elevated privileges to exploit this, but successful exploitation could result in arbitrary file creation on the system, potentially compromising system integrity or enabling privilege escalation.

• CVE-2026-44173MEDIUM 5.0

  MariaDB server versions within specific ranges contain a privilege-escalation flaw that allows authenticated users to write files to the server's filesystem without possessing the FILE privilege. The vulnerability exists when SELECT statements direct output to files (using INTO OUTFILE or INTO DUMPFILE) and the FROM clause references only subqueries, bypassing the privilege check. An attacker with database login credentials but no explicit FILE permission can exploit this to write arbitrary content to disk, potentially compromising system integrity or enabling further attacks.

• CVE-2026-44169MEDIUM 4.3

  MariaDB's access control for stored routines has a flaw that leaks routine definitions to users who shouldn't see them. If a user receives EXECUTE permission on a stored routine through a database role, they can view the routine's source code without having explicit SHOW CREATE ROUTINE privilege. This bypasses the intended separation between execution rights and visibility rights, allowing unauthorized code inspection. The issue affects MariaDB 11.4, 11.8, and 12.3 releases across a specific version range and has been patched.