PT-2026-45147 · Mariadb Foundation · Mariadb

Published 2026-05-26 · Updated 2026-06-16 · CVE-2026-44169

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions MariaDB server versions 11.4.1 through 11.4.10 MariaDB server versions 11.8.1 through 11.8.6 MariaDB server version 12.3.1

Description A user granted EXECUTE access to a stored routine through a role can view the routine definition, even if they lack the SHOW CREATE ROUTINE privilege.

Recommendations Update to version 11.4.11 Update to version 11.8.7 Update to version 12.3.2

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BIT-MARIADB-2026-44169

BIT-MARIADB-MIN-2026-44169

BIT-MYSQL-CLIENT-2026-44169

CVE-2026-44169

ECHO-B424-8486-8D0A

OPENSUSE-SU-2026:10897-1

OPENSUSE-SU-2026:20933-1

SUSE-SU-2026:22095-1

SUSE-SU-2026:2330-1

Affected Products

Mariadb

References · 38

• https://osv.dev/vulnerability/openSUSE-SU-2026:20933-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:2330-1 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mariadb-min-2026-44169 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mariadb-2026-44169 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-44169 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:22095-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-44169 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mysql-client-2026-44169 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10897-1 · Vendor Advisory
• https://github.com/MariaDB/server/security/advisories/GHSA-22xq-vq3f-87x2 · Note
• https://bugzilla.suse.com/1266440 · Note
• https://bugzilla.suse.com/1266442 · Note
• https://suse.com/security/cve/CVE-2026-49261 · Note
• https://suse.com/security/cve/CVE-2026-3494 · Note
• https://suse.com/support/update/announcement/2026/suse-su-202622095-1 · Note