CVE-2026-97380

HIGH 8.8

MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges

CVSS Score

8.8

EPSS Score

0.0%

EPSS Percentile

0th

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFIED clause with an empty password as though authentication were not specified, causing it to check the wrong grantor privileges. A low-privileged attacker who can name another account can exploit this authorization error to set that account's password. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

CWE	CWE-620 CWE-863
Vendor	mariadb
Product	server
Published	Oct 16, 2026

Stay Ahead of the Next One

Get instant alerts for mariadb server

Be the first to know when new high vulnerabilities affecting mariadb server are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

MariaDB / server

>= 10.6.1, < 10.6.28 >= 10.11.1, < 10.11.19 >= 11.4.1, < 11.4.13 >= 11.8.1, < 11.8.9 >= 12.3.1, < 12.3.3 >= 13.0.1, < 13.0.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/MariaDB/server/security/advisories/GHSA-625w-4hgq-qwmr github.com: https://github.com/MariaDB/server/commit/dbd60d0ad8daa2d01050346aa50b7b102490e456 github.com: https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19 github.com: https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28 github.com: https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13 github.com: https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9 github.com: https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3 github.com: https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2 jira.mariadb.org: https://jira.mariadb.org/browse/MDEV-40470