Database Privilege Escalation in MariaDB Server Versions 10.6 and 11.x
CVE-2026-107823
7.2HIGH
What is CVE-2026-107823?
A security issue exists in the MariaDB server affecting specific versions, where the FRM parser fails to safely encode embedded newline characters in usernames. This vulnerability can be exploited by an account with the necessary privileges to create users and views, allowing the crafted username to inject additional metadata. Consequently, this may lead to unintended privilege escalation within the database, compromising the integrity and security of the data stored.
Affected Version(s)
server >= 10.6.1, < 10.6.28 < 10.6.1, 10.6.28
server >= 10.11.1, < 10.11.19 < 10.11.1, 10.11.19
server >= 11.4.1, < 11.4.13 < 11.4.1, 11.4.13