CVE-2026-44169

A flaw was found in MariaDB server. A user who has been granted EXECUTE access to a stored routine through a role can view the definition of that routine. This information disclosure occurs even if the user does not possess the SHOW CREATE ROUTINE privilege, potentially exposing sensitive routine logic. This vulnerability allows for unauthorized access to routine definitions.

Moderate: MariaDB server, as shipped in Red Hat products, is affected by an information disclosure flaw. A user granted EXECUTE access to a stored routine through a role can view the routine's definition without possessing the SHOW CREATE ROUTINE privilege. This is considered Moderate as it requires existing privileges and only exposes routine logic, not arbitrary code execution or data manipulation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.