CVE-2026-44169

Published: Jun 12, 2026Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: security-advisories@github.com (Secondary)

Description

MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.

Affected (3)

Products: Mariadb: Mariadb

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mariadb Mariadb	From 11.4.1 to 11.4.11
Mariadb Mariadb	From 11.8.1 to 11.8.7
Mariadb Mariadb	Version 12.3.1

Related CWEs

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (2)

https://github.com/MariaDB/server/security/advisories/GHSA-22xq-vq3f-87x2

Source: security-advisories@github.com

Vendor Advisory

https://jira.mariadb.org/browse/MDEV-39288

Source: security-advisories@github.com

Issue Tracking

Timeline

No history available yet.