CVE-2026-107823

HIGH 7.2

MariaDB: privilege escalation via incorrect view frm parsing

CVSS Score

7.2

EPSS Score

0.0%

EPSS Percentile

0th

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username. An account with CREATE USER and CREATE VIEW WITH GRANT OPTION could create a crafted username containing additional view metadata, causing the parser to interpret part of the username as security metadata and potentially escalating database privileges. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

CWE	CWE-116 CWE-144
Vendor	mariadb
Product	server
Published	Oct 9, 2026

Stay Ahead of the Next One

Get instant alerts for mariadb server

Be the first to know when new high vulnerabilities affecting mariadb server are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

MariaDB / server

>= 10.6.1, < 10.6.28 >= 10.11.1, < 10.11.19 >= 11.4.1, < 11.4.13 >= 11.8.1, < 11.8.9 >= 12.3.1, < 12.3.3 >= 13.0.1, < 13.0.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/MariaDB/server/security/advisories/GHSA-g2q2-3936-cp37 github.com: https://github.com/MariaDB/server/commit/8a642bc8103aadc6b2087d781ba8e1595616a2c4 github.com: https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19 github.com: https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28 github.com: https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13 github.com: https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9 github.com: https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3 github.com: https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2 jira.mariadb.org: https://jira.mariadb.org/browse/MDEV-40484