CVE-2026-107814

Summary

MariaDB servers with RPM packages created a dedicated mysql service account with the database data directory as its home directory. A database user with FILE privilege could write startup dot-files into this home directory, which would execute when administrators opened login shells for the mysql account, potentially allowing privilege escalation. This affects versions from 10.6.1 through 10.6.27, 10.11.18, 11.4.12, 11.8.8, 12.3.2, and 13.0.1.

Exploitability

Exploitation requires a database user with FILE privilege to write malicious dot-files into the mysql account's home directory, which then execute when an admin opens a login shell for that account; this is moderately difficult but possible with proper access.

Blast radius

The impact could be significant if attackers can leverage this to gain elevated privileges on the database server, potentially leading to full system compromise through the mysql service account.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to MariaDB 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, or 13.0.2 to fix the issue.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.