MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.
CVSS Details
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-serverUpgrade mariadb-develUpgrade mariadb-backupUpgrade mariadb-testUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade JudyUpgrade mariadbUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb-pam | Jan 9, 2026 | Jan 6, 2026 |
| Amazon_linux_2023 | — | Upgrade mariadb1011-connect-engineUpgrade mariadb1011-develUpgrade mariadb1011-serverUpgrade mariadb1011-gssapi-server-debuginfoUpgrade mariadb1011-commonUpgrade mariadb1011-server-utils-debuginfoUpgrade mariadb1011-cracklib-password-checkUpgrade mariadb1011-server-debuginfoUpgrade mariadb1011-oqgraph-engineUpgrade mariadb1011-testUpgrade mariadb1011-gssapi-serverUpgrade mariadb1011-server-utilsUpgrade mariadb1011-debuginfoUpgrade mariadb1011Upgrade mariadb1011-rocksdb-engineUpgrade mariadb1011-pam-debuginfoUpgrade mariadb1011-pamUpgrade mariadb1011-backup-debuginfoUpgrade mariadb1011-errmsgUpgrade mariadb1011-cracklib-password-check-debuginfoUpgrade mariadb1011-client-utilsUpgrade mariadb1011-oqgraph-engine-debuginfoUpgrade mariadb1011-sphinx-engine-debuginfoUpgrade mariadb1011-rocksdb-engine-debuginfoUpgrade mariadb1011-connect-engine-debuginfoUpgrade mariadb1011-backupUpgrade mariadb1011-test-debuginfoUpgrade mariadb1011-sphinx-engineUpgrade mariadb1011-debugsource | Jan 12, 2026 | Nov 27, 2025 |
| Debian | — | Upgrade mariadb | Jul 12, 2026 | Jul 12, 2026 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Jan 6, 2026 | Dec 23, 2025 |
| Oracle_linux | — | Upgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-benchUpgrade mariadb-embeddedUpgrade mariadb-errmsgUpgrade mariadbUpgrade mariadb-libsUpgrade mariadb-develUpgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade galeraUpgrade mariadb-client-utilsUpgrade JudyUpgrade mariadb-testUpgrade mariadb-commonUpgrade mariadb-pamUpgrade asio-develUpgrade Judy-devel | Jan 9, 2026 | Nov 27, 2025 |
| Redhat_linux | — | Upgrade mariadb-server-utils-debuginfoUpgrade mariadb-commonUpgrade mariadb-embedded-debuginfoUpgrade galera-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade Judy-debugsourceUpgrade Judy-debuginfoUpgrade galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-pam-debuginfoUpgrade Judy-develUpgrade mariadb-server-galeraUpgrade mariadb-libsUpgrade mariadb-client-utilsUpgrade mariadb-serverUpgrade mariadb-benchUpgrade mariadb-errmsgUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade mariadb10.11-debugsourceUpgrade mariadb-pamUpgrade mariadb10.11-debuginfoUpgrade mariadb-testUpgrade mariadb-embedded-develUpgrade mariadb-debugsourceUpgrade JudyUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-server-debuginfoUpgrade galera-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-backup-debuginfoUpgrade asio-devel | Jan 6, 2026 | Nov 27, 2025 |
| Rocky_linux | — | Upgrade JudyUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade galera-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-server-debuginfoUpgrade asio-develUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade mariadb-backup-debuginfoUpgrade mariadb-testUpgrade mariadb-errmsgUpgrade mariadb-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-embeddedUpgrade galera-debugsourceUpgrade Judy-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-serverUpgrade mariadb-commonUpgrade Judy-develUpgrade galeraUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-backupUpgrade mariadb-pam-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-test-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-debuginfo | Jan 8, 2026 | Jan 7, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 23, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub