Critical Vulnerability in MySQL Client: Unauthorized Data Access Risk
Summary
CVE-2025-30722: Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Affects mariadb versions < 1:10.11.13-0+deb12u1. Fixed in 1:10.11.13-0+deb12u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MySQL Client is a widely used database management tool developed by Oracle. It facilitates interaction with MySQL databases, allowing users to execute queries, manage data, and perform administrative tasks. The MySQL Client is integral for developers and database administrators, providing essential functionalities for database management. However, certain versions of the MySQL Client are vulnerable to a security flaw that could allow unauthorized access to sensitive data.
Vulnerability Detail
CVE-2025-30722 is a vulnerability in the MySQL Client product of Oracle MySQL, specifically affecting the mysqldump component. This vulnerability exists in supported versions 8.0.0-8.0.41, 8.4.0-8.4.4, and 9.0.0-9.2.0. It is classified as difficult to exploit, allowing a low privileged attacker with network access via multiple protocols to compromise the MySQL Client. Successful exploitation can lead to unauthorized access to critical data, as well as the ability to update, insert, or delete data within the MySQL Client environment. The CVSS 3.1 Base Score for this vulnerability is 5.9, indicating significant impacts on confidentiality and integrity.
How To Fix
Minimum fixed version
1:10.11.13-0+deb12u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade mariadbTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, consider restricting network access to the MySQL Client to trusted sources only. This can help mitigate the risk of exploitation until a patch is applied.
Conclusion
CVE-2025-30722 poses a significant risk to users of the MySQL Client, allowing unauthorized access to sensitive data. It is crucial for users to update their software to the latest patched version and consider implementing network access restrictions as a temporary measure. Regular monitoring for vulnerabilities using tools like Vulert can help maintain security.
See every vulnerability recorded for mariadb →
FAQ
CVE-2025-30722 is a vulnerability in the MySQL Client that allows unauthorized access to data.
Affected versions include 8.0.0-8.0.41, 8.4.0-8.4.4, and 9.0.0-9.2.0.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If immediate updates are not possible, restrict network access to the MySQL Client to trusted sources as a temporary workaround.
Exploitation of this vulnerability can lead to unauthorized access to critical data and the ability to manipulate data within the MySQL Client.
Related vulnerabilities
Recent vulnerabilities recorded for mariadb.
