File Access Vulnerability in MariaDB Server by MariaDB Corporation
CVE-2026-85985
What is CVE-2026-85985?
The MariaDB server, a widely used database management system, suffers from a file access vulnerability in the CONNECT engine plugin. This security issue arises from a failure to enforce appropriate FILE privileges and the secure_file_priv setting, allowing low-privileged attackers to exploit specific User-Defined Functions (UDFs) such as json_file(), bson_file(), jfile_make(), bfile_make(), and jbin_file(). By invoking these functions with manipulated filesystem paths, attackers could gain unauthorized read or write access to files on the system, depending on the operating-system permissions. This vulnerability has been addressed in the latest versions, including 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.
Affected Version(s)
server >= 10.6.1, < 10.6.28 < 10.6.1, 10.6.28
server >= 10.11.1, < 10.11.19 < 10.11.1, 10.11.19
server >= 11.4.1, < 11.4.13 < 11.4.1, 11.4.13