Critical Remote Code Execution Vulnerability in MariaDB Packages
Summary
ALSA-2026:0232: Important: mariadb:10.11 security update. Affects Judy across 2 version ranges.
< 1.0.5-18.module_el8.10.0+3794+c6a66d65
< 1.0.5-18.module_el8.10.0+3955+6534edaf
Fixed in 1.0.5-18.module_el8.10.0+3794+c6a66d65 or 1.0.5-18.module_el8.10.0+3955+6534edaf, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
MariaDB is a widely-used, multi-user, multi-threaded SQL database server that is binary compatible with MySQL. It is designed to handle large volumes of data and provide high performance, scalability, and security. However, recent vulnerabilities have raised concerns about its security, particularly regarding the mariadb-dump utility, which is susceptible to remote code execution due to improper path validation.
Vulnerability Detail
The vulnerability identified as CVE-2025-13699 affects the mariadb-dump utility within MariaDB. This flaw allows an attacker to execute arbitrary code remotely by exploiting improper path validation. If successfully exploited, this vulnerability could lead to unauthorized access and control over the database server, potentially compromising sensitive data and disrupting services.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
sudo dnf update Judy-
< 1.0.5-18.module_el8.10.0+3794+c6a66d651.0.5-18.module_el8.10.0+3794+c6a66d65 -
< 1.0.5-18.module_el8.10.0+3955+6534edaf1.0.5-18.module_el8.10.0+3955+6534edaf
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
As a temporary workaround, consider restricting access to the mariadb-dump utility or implementing network-level security measures to limit exposure to potential attackers until the patch can be applied.
Conclusion
The vulnerability CVE-2025-13699 poses a significant risk to MariaDB users, allowing for remote code execution through the mariadb-dump utility. It is crucial to update to the patched versions of the affected packages to mitigate this risk. Additionally, users can utilize Vulert to monitor and alert for open-source vulnerabilities in their software.
See every vulnerability recorded for Judy →
FAQ
CVE-2025-13699 is a vulnerability in the mariadb-dump utility that allows for remote code execution due to improper path validation.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Exploitation of this vulnerability could lead to unauthorized access, data breaches, and potential control over the database server.
You can update your MariaDB packages using the command: sudo dnf update mariadb mariadb-backup mariadb-common mariadb-devel mariadb-embedded mariadb-embedded-devel mariadb-errmsg mariadb-gssapi-server mariadb-oqgraph-engine mariadb-pam mariadb-server mariadb-server-galera mariadb-server-utils mariadb-test.
If you cannot apply the patch immediately, consider implementing network-level security measures to limit access to the mariadb-dump utility as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for Judy.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
