MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.
CVSS Details
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade JudyUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-pamUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade mariadb-testUpgrade mariadb-commonUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mariadb-serverUpgrade galera | Jan 9, 2026 | Jan 6, 2026 |
| Amazon_linux_2023 | — | Upgrade mariadb1011-sphinx-engine-debuginfoUpgrade mariadb1011-client-utilsUpgrade mariadb1011-oqgraph-engine-debuginfoUpgrade mariadb1011-connect-engine-debuginfoUpgrade mariadb1011-debugsourceUpgrade mariadb1011-sphinx-engineUpgrade mariadb1011-test-debuginfoUpgrade mariadb1011-backupUpgrade mariadb1011-cracklib-password-check-debuginfoUpgrade mariadb1011-rocksdb-engine-debuginfoUpgrade mariadb1011-connect-engineUpgrade mariadb1011Upgrade mariadb1011-pamUpgrade mariadb1011-server-utilsUpgrade mariadb1011-testUpgrade mariadb1011-serverUpgrade mariadb1011-gssapi-server-debuginfoUpgrade mariadb1011-commonUpgrade mariadb1011-pam-debuginfoUpgrade mariadb1011-rocksdb-engineUpgrade mariadb1011-oqgraph-engineUpgrade mariadb1011-server-debuginfoUpgrade mariadb1011-server-utils-debuginfoUpgrade mariadb1011-cracklib-password-checkUpgrade mariadb1011-debuginfoUpgrade mariadb1011-errmsgUpgrade mariadb1011-gssapi-serverUpgrade mariadb1011-develUpgrade mariadb1011-backup-debuginfo | Jan 12, 2026 | Nov 27, 2025 |
| Debian | — | Upgrade mariadb | Jul 12, 2026 | Jul 12, 2026 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Jan 6, 2026 | Dec 23, 2025 |
| Oracle_linux | — | Upgrade asio-develUpgrade mariadb-pamUpgrade mariadb-testUpgrade Judy-develUpgrade mariadb-commonUpgrade JudyUpgrade mariadb-libsUpgrade mariadb-errmsgUpgrade mariadb-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadbUpgrade mariadb-embedded-develUpgrade mariadb-embeddedUpgrade mariadb-server-galeraUpgrade mariadb-benchUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade mariadb-client-utils | Jan 9, 2026 | Nov 27, 2025 |
| Redhat_linux | — | Upgrade JudyUpgrade mariadbUpgrade galera-debuginfoUpgrade mariadb10.11-debugsourceUpgrade mariadb-pamUpgrade mariadb-backup-debuginfoUpgrade asio-develUpgrade mariadb10.11-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-server-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-testUpgrade mariadb-server-utilsUpgrade Judy-debugsourceUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-debuginfoUpgrade mariadb-debuginfoUpgrade galera-debugsourceUpgrade mariadb-errmsgUpgrade mariadb-client-utilsUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-develUpgrade Judy-debuginfoUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade mariadb-benchUpgrade mariadb-pam-debuginfoUpgrade mariadb-libsUpgrade Judy-develUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-test-debuginfoUpgrade mariadb-server-utils-debuginfo | Jan 6, 2026 | Nov 27, 2025 |
| Rocky_linux | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-pamUpgrade mariadb-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-testUpgrade mariadbUpgrade mariadb-server-debuginfoUpgrade JudyUpgrade asio-develUpgrade mariadb-embedded-develUpgrade mariadb-backup-debuginfoUpgrade galera-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-backupUpgrade mariadb-test-debuginfoUpgrade galera-debugsourceUpgrade mariadb-serverUpgrade mariadb-develUpgrade mariadb-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade galeraUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade Judy-develUpgrade Judy-debugsourceUpgrade mariadb-gssapi-server-debuginfo | Jan 8, 2026 | Jan 7, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 23, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub