PT-2026-24612 · Bitnami · Mysql Client

Publicado 2026-03-10 · Atualizado 2026-03-10

OSV

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server audit events variable configured with QUERY DCL, QUERY DDL, or QUERY DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

Identificadores relacionados

BIT-MYSQL-CLIENT-2026-3494

Produtos afetados

Mysql Client

Referências · 5

• https://github.com/MariaDB/server/commit/635559a2ad68a5a6d1a354e8209c58323dba0261 · Nota
• https://github.com/aws/audit-plugin-for-mysql/commit/01e25a5cb1073f131eea774c06c8a056b1e4b2ff · Nota
• https://osv.dev/vulnerability/BIT-mysql-client-2026-3494 · Aviso do Fabricante
• https://aws.amazon.com/security/security-bulletins/2026-006-AWS · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-3494 · Nota de Segurança