cveboard RSS feed

CVE-2026-85985

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2026
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

MariaDB: Unauthorized file access via CONNECT engine UDFs

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine plugin file-access UDFs json_file(), bson_file(), jfile_make(), bfile_make(), and jbin_file() are affected because each does not enforce FILE privilege or the secure_file_priv setting. A low-privileged attacker can trigger the issue by calling a CONNECT file-access UDF with a filesystem path, then invoke a CONNECT file-access UDF to access a filesystem path and read or write files that the database account is not authorized to access, subject to operating-system permissions. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

server

Vendor
MariaDB
Product
server
Platforms
Unknown
Default status
Unknown
server · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
>= 10.6.1, < 10.6.28affectedUnavailableUnavailableUnavailableNone listed
>= 10.11.1, < 10.11.19affectedUnavailableUnavailableUnavailableNone listed
>= 11.4.1, < 11.4.13affectedUnavailableUnavailableUnavailableNone listed
>= 11.8.1, < 11.8.9affectedUnavailableUnavailableUnavailableNone listed
>= 12.3.1, < 12.3.3affectedUnavailableUnavailableUnavailableNone listed
>= 13.0.1, < 13.0.2affectedUnavailableUnavailableUnavailableNone listed