CVE-2026-102523: MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION
MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVERT ... PARTITION does not apply filename encoding to user-specified partition names before using them in filesystem path construction. An authenticated database user can use a partition name requiring filename escaping to make the conversion operate on table files the user is not authorized to access, allowing unauthorized table reads or modifications. This issue is fixed in versions 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
MariaDB serverto a version that resolves this vulnerability.Fixed in 10.11.19 - Upgrade
Upgrade
MariaDB serverto a version that resolves this vulnerability.Fixed in 11.4.13 - Upgrade
Upgrade
MariaDB serverto a version that resolves this vulnerability.Fixed in 11.8.9 - Upgrade
Upgrade
MariaDB serverto a version that resolves this vulnerability.Fixed in 12.3.3 - Upgrade
Upgrade
MariaDB serverto a version that resolves this vulnerability.Fixed in 13.0.2
Event History
Frequently Asked Questions
Which deployments are affected?
MariaDB Server deployments running versions from 10.11.1 through versions before the listed fixes are affected. The issue is fixed in 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.
What access does an attacker need?
An attacker needs an authenticated MariaDB database account and must be able to issue an ALTER TABLE ... CONVERT ... PARTITION operation with a user-specified partition name requiring filename escaping. No unauthenticated attack path is described.
What is the potential impact?
A successful exploit can cause the conversion operation to act on table files that the database user is not authorized to access. This can allow unauthorized reads or modifications of tables.
What should be done to remediate the issue?
Upgrade to MariaDB Server 10.11.19, 11.4.13, 11.8.9, 12.3.3, or 13.0.2, as appropriate for the deployed release branch.