Vulnerability · Published Jun 12, 2026 · Assigned by GitHub_M
CVE-2026-44169MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions
Medium 4.3
In plain English
A medium-severity incorrect authorization in server from MariaDB. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.2%top 85.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:10 | galera | 26.4.27-1.el10_2 | ALSA-2026:33412 |
| AlmaLinux:9 | galera | 26.4.27-1.module_el9.8.0+274+ad8c02e7 | ALSA-2026:33481 |
| AlmaLinux:9 | mariadb | 3:11.8.8-1.module_el9.8.0+274+ad8c02e7 | ALSA-2026:33481 |
| AlmaLinux:9 | mariadb-backup | 3:11.8.8-1.module_el9.8.0+274+ad8c02e7 | ALSA-2026:33481 |
| AlmaLinux:9 | mariadb-client-utils | 3:11.8.8-1.module_el9.8.0+274+ad8c02e7 | ALSA-2026:33481 |
| AlmaLinux:9 | mariadb-common | 3:11.8.8-1.module_el9.8.0+274+ad8c02e7 | ALSA-2026:33481 |
| AlmaLinux:9 | mariadb-devel | 3:11.8.8-1.module_el9.8.0+274+ad8c02e7 | ALSA-2026:33481 |
| AlmaLinux:9 | mariadb-embedded | 3:11.8.8-1.module_el9.8.0+274+ad8c02e7 | ALSA-2026:33481 |
| AlmaLinux:9 | mariadb-embedded-devel | 3:11.8.8-1.module_el9.8.0+274+ad8c02e7 | ALSA-2026:33481 |
| AlmaLinux:9 | mariadb-errmsg | 3:11.8.8-1.module_el9.8.0+274+ad8c02e7 | ALSA-2026:33481 |
| AlmaLinux:9 | mariadb-gssapi-server | 3:11.8.8-1.module_el9.8.0+274+ad8c02e7 | ALSA-2026:33481 |
| AlmaLinux:9 | mariadb-oqgraph-engine | 3:11.8.8-1.module_el9.8.0+274+ad8c02e7 | ALSA-2026:33481 |
| AlmaLinux:9 | mariadb-pam | 3:11.8.8-1.module_el9.8.0+274+ad8c02e7 | ALSA-2026:33481 |
| AlmaLinux:9 | mariadb-server | 3:11.8.8-1.module_el9.8.0+274+ad8c02e7 | ALSA-2026:33481 |
| AlmaLinux:9 | mariadb-server-galera | 3:11.8.8-1.module_el9.8.0+274+ad8c02e7 | ALSA-2026:33481 |
| AlmaLinux:9 | mariadb-server-utils | 3:11.8.8-1.module_el9.8.0+274+ad8c02e7 | ALSA-2026:33481 |
| AlmaLinux:9 | mariadb-test | 3:11.8.8-1.module_el9.8.0+274+ad8c02e7 | ALSA-2026:33481 |
| AlmaLinux:10 | mariadb11.8 | 3:11.8.8-1.el10_2 | ALSA-2026:33412 |
| AlmaLinux:10 | mariadb11.8-backup | 3:11.8.8-1.el10_2 | ALSA-2026:33412 |
| AlmaLinux:10 | mariadb11.8-client-utils | 3:11.8.8-1.el10_2 | ALSA-2026:33412 |
| AlmaLinux:10 | mariadb11.8-common | 3:11.8.8-1.el10_2 | ALSA-2026:33412 |
| AlmaLinux:10 | mariadb11.8-devel | 3:11.8.8-1.el10_2 | ALSA-2026:33412 |
| AlmaLinux:10 | mariadb11.8-embedded | 3:11.8.8-1.el10_2 | ALSA-2026:33412 |
| AlmaLinux:10 | mariadb11.8-embedded-devel | 3:11.8.8-1.el10_2 | ALSA-2026:33412 |
| AlmaLinux:10 | mariadb11.8-errmsg | 3:11.8.8-1.el10_2 | ALSA-2026:33412 |
| AlmaLinux:10 | mariadb11.8-gssapi-server | 3:11.8.8-1.el10_2 | ALSA-2026:33412 |
| AlmaLinux:10 | mariadb11.8-oqgraph-engine | 3:11.8.8-1.el10_2 | ALSA-2026:33412 |
| AlmaLinux:10 | mariadb11.8-pam | 3:11.8.8-1.el10_2 | ALSA-2026:33412 |
| AlmaLinux:10 | mariadb11.8-server | 3:11.8.8-1.el10_2 | ALSA-2026:33412 |
| AlmaLinux:10 | mariadb11.8-server-galera | 3:11.8.8-1.el10_2 | ALSA-2026:33412 |
| AlmaLinux:10 | mariadb11.8-server-utils | 3:11.8.8-1.el10_2 | ALSA-2026:33412 |
| AlmaLinux:10 | mariadb11.8-test | 3:11.8.8-1.el10_2 | ALSA-2026:33412 |
| Alpine:v3.20 | mariadb | 10.11.17-r0 | ALPINE-CVE-2026-44169 |
| Alpine:v3.21 | mariadb | 11.4.11-r0 | ALPINE-CVE-2026-44169 |
| Alpine:v3.22 | mariadb | 11.4.11-r0 | ALPINE-CVE-2026-44169 |
| Alpine:v3.23 | mariadb | 11.4.11-r0 | ALPINE-CVE-2026-44169 |
| Alpine:v3.24 | mariadb | 11.8.7-r0 | ALPINE-CVE-2026-44169 |
| Debian:12 | mariadb | no fix listed | DEBIAN-CVE-2026-44169 |
| Debian:13 | mariadb | no fix listed | DEBIAN-CVE-2026-44169 |
| Debian:14 | mariadb | 1:11.8.8-1 | DEBIAN-CVE-2026-44169 |
| Rocky Linux:10 | galera | 0:26.4.27-1.el10_2 | RLSA-2026:33412 |
| Rocky Linux:9 | galera | 0:26.4.27-1.module+el9.8.0+40229+87be66a2 | RLSA-2026:33482 |
| Rocky Linux:9 | galera | 0:26.4.27-1.module+el9.8.0+40229+87be66a2 | RLSA-2026:33481 |
| Rocky Linux:9 | galera | 0:26.4.27-1.module+el9.8.0+40232+a354f53a | RLSA-2026:33481 |
| Rocky Linux:9 | galera | 0:26.4.27-1.module+el9.8.0+40232+a354f53a | RLSA-2026:33482 |
| Rocky Linux:9 | mariadb | 3:11.8.8-1.module+el9.8.0+40229+87be66a2 | RLSA-2026:33481 |
| Rocky Linux:9 | mariadb | 3:10.11.18-1.module+el9.8.0+40232+a354f53a | RLSA-2026:33482 |
| Rocky Linux:10 | mariadb10.11 | 3:10.11.18-1.el10_2 | RLSA-2026:33093 |
| Ubuntu:24.04:LTS | mariadb | no fix listed | UBUNTU-CVE-2026-44169 |
| Ubuntu:25.10 | mariadb | no fix listed | UBUNTU-CVE-2026-44169 |
| Ubuntu:26.04:LTS | mariadb | 1:11.8.6-5ubuntu0.1 | UBUNTU-CVE-2026-44169 |
| Ubuntu:22.04:LTS | mariadb-10.6 | no fix listed | UBUNTU-CVE-2026-44169 |
Affected products (as reported)
Weakness: CWE-863 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
References
- https://github.com/MariaDB/server/security/advisories/GHSA-22xq-vq3f-87x2 x_refsource_CONFIRM
- https://jira.mariadb.org/browse/MDEV-39288 x_refsource_MISC