# CVE-2026-102523

Authenticated path-traversal allows unauthorized table read/modify in MariaDB

- Page: https://www.vulneraibility.com/cve/CVE-2026-102523
- CVSS: 8.0
- Known exploited: not in CISA KEV as of our last sync
- CISA SSVC: exploitation none, automatable no, technical impact total (assessed 2026-11-05)
- Weakness: CWE-73
- Also known as: GHSA-h4vr-wpff-jfx4
- Published: 2026-11-05

## Affected versions

- MariaDB server: affected >= 10.11.1 and < 10.11.19; >= 11.4.1 and < 11.4.13; >= 11.8.1 and < 11.8.9; >= 12.3.1 and < 12.3.3; >= 13.0.1 and < 13.0.2

A version outside these ranges is not a statement that it is unaffected.

## Impact

Authenticated users can craft partition names to traverse filesystem to read or modify other tables' files, enabling data theft or corruption.

## Action

Patch when possible

## Recommendation

Upgrade to fixed versions or restrict DB user privileges immediately

## References

- [other] https://github.com/MariaDB/server/security/advisories/GHSA-h4vr-wpff-jfx4
- [other] https://github.com/MariaDB/server/commit/98437c30ae52ed709f266e5f8095d779261a5879
- [other] https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19
- [other] https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13
- [other] https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9
- [other] https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3
- [other] https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2
- [other] https://jira.mariadb.org/browse/MDEV-40413

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.