CVE-2026-44173

A flaw was found in MariaDB server. This vulnerability allows a low-privileged authenticated user to bypass a security control that normally restricts file operations. Specifically, the system failed to verify the necessary 'FILE' privilege when certain 'SELECT' statements, which write data to files, were executed with subqueries in their 'FROM' clause. This could enable an attacker to write unauthorized files to the server's file system, potentially leading to the disclosure of sensitive information or a denial of service by corrupting or filling disk space.

This is an Important flaw in MariaDB server that allows a low-privileged authenticated database user to bypass the 'FILE' privilege check. By crafting specific SELECT ... INTO OUTFILE or SELECT ... INTO DUMPFILE statements with subqueries, an attacker can write arbitrary files to the server's file system. This could lead to data corruption, information disclosure, or a denial of service on affected Red Hat products where MariaDB is deployed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.