CVE-2026-107823

Name of the Vulnerable Software and Affected Versions MariaDB server versions 10.6.1 through 10.6.27 MariaDB server version 10.11.18 and earlier MariaDB server version 11.4.12 and earlier MariaDB server version 11.8.8 and earlier MariaDB server version 12.3.2 and earlier MariaDB server version 13.0.1 and earlier

Description The view FRM parser fails to safely encode embedded newline characters within a username. An account possessing CREATE USER and CREATE VIEW WITH GRANT OPTION privileges can create a crafted username containing additional view metadata. This causes the parser to interpret part of the username as security metadata, which may lead to an escalation of database privileges.

Recommendations Update to version 10.6.28 Update to version 10.11.19 Update to version 11.4.13 Update to version 11.8.9 Update to version 12.3.3 Update to version 13.0.2