CVE-2026-44171

A flaw was found in MariaDB's mbstream utility. This vulnerability allows a highly privileged local attacker, who can provide a specially crafted archive, to create files outside of the intended target directory. This is due to mbstream not properly validating paths containing directory traversal sequences (e.g., "/../") during archive unpacking. Successful exploitation could lead to unauthorized file creation, potentially impacting system integrity or availability.

This Moderate vulnerability in MariaDB's mbstream utility could allow a highly privileged local attacker to create arbitrary files outside of the designated target directory. By providing a specially crafted archive, an attacker could exploit a path traversal flaw during archive unpacking, potentially impacting the integrity and availability of Red Hat systems utilizing MariaDB.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.