Unauthorized Access Vulnerability in MariaDB Server
CVE-2026-102523
8HIGH
What is CVE-2026-102523?
MariaDB Server contains a vulnerability that arises from improper handling of user-specified partition names during file operations. Specifically, the ALTER TABLE ... CONVERT ... PARTITION command fails to apply appropriate filename encoding to these names, allowing authenticated users to manipulate the filesystem paths. This exploitation can lead to unauthorized access and modifications of sensitive table files, significantly impacting data integrity and confidentiality. Users are advised to upgrade to the patched versions to mitigate this risk.
Affected Version(s)
server >= 10.11.1, < 10.11.19 < 10.11.1, 10.11.19
server >= 11.4.1, < 11.4.13 < 11.4.1, 11.4.13
server >= 11.8.1, < 11.8.9 < 11.8.1, 11.8.9