CVE-2026-102523
Received Received - Intake

Partition Name Path Traversal in MariaDB Server

Publication date: 2026-11-05

Last updated on: 2026-11-05

Assigner: GitHub, Inc.

Description
MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVERT ... PARTITION does not apply filename encoding to user-specified partition names before using them in filesystem path construction. An authenticated database user can use a partition name requiring filename escaping to make the conversion operate on table files the user is not authorized to access, allowing unauthorized table reads or modifications. This issue is fixed in versions 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-05
Last Modified
2026-11-05
Generated
2026-11-05
AI Q&A
2026-11-05
EPSS Evaluated
N/A
NVD
CVE-2026-102523
EUVD
EUVD-2026-117548

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
MariaDB server >= 10.11.1, < 10.11.19
MariaDB server >= 11.4.1, < 11.4.13
MariaDB server >= 11.8.1, < 11.8.9
MariaDB server >= 12.3.1, < 12.3.3
MariaDB server >= 13.0.1, < 13.0.2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-73 The product allows user input to control or influence paths or file names that are used in filesystem operations.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in MariaDB allows an authenticated user to bypass authorization by exploiting improper filename encoding in the ALTER TABLE ... CONVERT ... PARTITION command. When partition names require special escaping (like hyphens), the system fails to encode them correctly before using them in filesystem paths. This can let an attacker read or modify tables they shouldn't have access to.

Detection Guidance

To detect this vulnerability, check your MariaDB version using 'mysql --version' or 'SELECT VERSION();'. If your version is between 10.11.1-10.11.18, 11.4.1-11.4.12, 11.8.1-11.8.8, 12.3.1-12.3.2, or 13.0.1, you are vulnerable. Review partition operations in your database for unauthorized access patterns.

Impact Analysis

If you use an affected MariaDB version, an attacker with database access could read sensitive data from unauthorized tables or modify data they shouldn't be able to change. This could lead to data breaches, data corruption, or unauthorized changes to critical information.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, which may violate compliance requirements under GDPR (data protection), HIPAA (health information), or other regulations. Organizations using affected MariaDB versions may face legal penalties, reputational damage, or audit failures due to insufficient data protection measures.

Mitigation Strategies

Immediately upgrade MariaDB to a patched version (10.11.19, 11.4.13, 11.8.9, 12.3.3, or 13.0.2). As a temporary workaround, disable partition support using the --skip-plugin-partition flag when starting the MariaDB server.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-102523. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...