Home

Description

MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.

PUBLISHED Reserved 2026-05-05 | Published 2026-06-12 | Updated 2026-06-13 | Assigner GitHub_M




MEDIUM: 4.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Problem types

CWE-863: Incorrect Authorization

Product status

>= 11.4.1, < 11.4.11
affected

>= 11.8.1, < 11.8.7
affected

>= 12.3.1, < 12.3.2
affected

References

github.com/...server/security/advisories/GHSA-22xq-vq3f-87x2

jira.mariadb.org/browse/MDEV-39288

cve.org (CVE-2026-44169)

nvd.nist.gov (CVE-2026-44169)

Download JSON