CVE-2026-107823

A flaw was found in MariaDB. An authenticated user with permissions to create users and views can escalate database privileges by creating an account with a crafted username containing embedded newline characters. Due to improper encoding in the view format parser, the injected input is interpreted as security metadata, granting the user unauthorized elevated permissions.

This vulnerability is classified as having an Important severity because successful exploitation enables an authenticated database account to escalate to full administrative access across the database instance, although it requires holding significant existing privileges. In standard Red Hat Enterprise Linux deployments, non-administrative database users are not granted user creation or view delegation privileges by default. The primary risk occurs in shared or multi-tenant database environments where delegated user administration is enabled, allowing a privileged user to cross privilege boundaries.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.