MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade galeraUpgrade mariadb-serverUpgrade mariadb-backupUpgrade mariadb-testUpgrade mariadb-commonUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade JudyUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-pamUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb-errmsg | Jan 9, 2026 | Jan 6, 2026 |
| Amazon_linux_2023 | — | Upgrade mariadb1011-testUpgrade mariadb1011Upgrade mariadb1011-backup-debuginfoUpgrade mariadb1011-errmsgUpgrade mariadb1011-debuginfoUpgrade mariadb1011-rocksdb-engineUpgrade mariadb1011-gssapi-serverUpgrade mariadb1011-pam-debuginfoUpgrade mariadb1011-server-utilsUpgrade mariadb1011-connect-engineUpgrade mariadb1011-gssapi-server-debuginfoUpgrade mariadb1011-serverUpgrade mariadb1011-commonUpgrade mariadb1011-develUpgrade mariadb1011-cracklib-password-checkUpgrade mariadb1011-oqgraph-engineUpgrade mariadb1011-server-utils-debuginfoUpgrade mariadb1011-pamUpgrade mariadb1011-server-debuginfoUpgrade mariadb1011-test-debuginfoUpgrade mariadb1011-rocksdb-engine-debuginfoUpgrade mariadb1011-sphinx-engineUpgrade mariadb1011-connect-engine-debuginfoUpgrade mariadb1011-cracklib-password-check-debuginfoUpgrade mariadb1011-client-utilsUpgrade mariadb1011-backupUpgrade mariadb1011-sphinx-engine-debuginfoUpgrade mariadb1011-oqgraph-engine-debuginfoUpgrade mariadb1011-debugsource | Jan 12, 2026 | Nov 27, 2025 |
| Debian | — | Upgrade mariadb | Jul 12, 2026 | Jul 12, 2026 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Jan 6, 2026 | Dec 23, 2025 |
| Oracle_linux | — | Upgrade mariadb-errmsgUpgrade mariadb-client-utilsUpgrade mariadb-libsUpgrade mariadb-backupUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade galeraUpgrade mariadb-testUpgrade mariadb-commonUpgrade JudyUpgrade Judy-develUpgrade asio-develUpgrade mariadb-pamUpgrade mariadb-develUpgrade mariadb-benchUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb-server | Jan 9, 2026 | Nov 27, 2025 |
| Redhat_linux | — | Upgrade mariadb-gssapi-server-debuginfoUpgrade asio-develUpgrade mariadb10.11-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debuginfoUpgrade mariadb10.11-debugsourceUpgrade mariadb-embedded-develUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utilsUpgrade mariadbUpgrade JudyUpgrade mariadb-testUpgrade mariadb-debugsourceUpgrade mariadb-pamUpgrade mariadb-backup-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-benchUpgrade mariadb-debuginfoUpgrade galera-debugsourceUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-develUpgrade Judy-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-server-galeraUpgrade mariadb-client-utilsUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-embedded-debuginfoUpgrade galeraUpgrade Judy-develUpgrade mariadb-pam-debuginfoUpgrade mariadb-libsUpgrade mariadb-embedded | Jan 6, 2026 | Nov 27, 2025 |
| Rocky_linux | — | Upgrade mariadb-testUpgrade asio-develUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadb-debugsourceUpgrade galera-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade JudyUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadbUpgrade mariadb-backup-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade galera-debugsourceUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-embedded-debuginfoUpgrade mariadb-backupUpgrade mariadb-test-debuginfoUpgrade galeraUpgrade Judy-develUpgrade mariadb-pam-debuginfoUpgrade mariadb-gssapi-server-debuginfo | Jan 8, 2026 | Jan 7, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 23, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub