CVE-2026-92262

A flaw was found in MariaDB. An authenticated remote attacker can supply a crafted table name with the #mysql50# prefix, which bypasses normal filesystem encoding for table names. By accessing files under unencoded legacy names, the attacker can achieve arbitrary code execution, exfiltrate sensitive information, corrupt data, or trigger a denial of service (DoS) by crashing the database server.

Red Hat Product Security rates this vulnerability as having an Important severity because an authenticated database user can achieve arbitrary code execution, exfiltrate data, or crash the database service across a network boundary, resulting in a severe compromise of system confidentiality and availability. While default deployments of MariaDB in Red Hat environments restrict direct network connectivity and require valid authentication credentials to submit queries, any user with table-level interaction capabilities can exploit the flaw without needing administrative privileges. The severity is elevated beyond Moderate because bypassing filesystem name encoding can breach the database sandbox and access underlying host files, though the prerequisite of existing database credentials prevents this from reaching Critical severity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Upgrade to the fixed version of MariaDB Server