Critical Remote Code Execution Vulnerability in MariaDB Packages
Summary
ALSA-2026:0137: Important: mariadb security update. Affects mariadb versions < 3:10.5.29-3.el9_7. Fixed in 3:10.5.29-3.el9_7. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MariaDB is a robust, multi-user, multi-threaded SQL database server that is designed to be binary compatible with MySQL. It is widely used for managing data in various applications due to its performance, scalability, and reliability. However, a recent security issue has been identified in the MariaDB packages, which could potentially expose systems to remote code execution attacks.
Vulnerability Detail
The vulnerability arises from the mariadb-dump utility, which is susceptible to improper path validation. This flaw allows an attacker to execute arbitrary code remotely, posing a significant risk to the integrity and confidentiality of the database. The vulnerability is tracked under CVE-2025-13699 and can lead to unauthorized access and manipulation of sensitive data.
How To Fix
Minimum fixed version
3:10.5.29-3.el9_7
This is the first release that contains the fix.
sudo dnf update mariadbTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users are advised to restrict access to the mariadb-dump utility and monitor for any suspicious activities until the packages are updated.
Conclusion
The identified vulnerability in MariaDB packages poses a serious threat to database security, allowing for potential remote code execution. It is crucial for users to update their packages to the latest patched version to safeguard their systems. Implementing temporary workarounds and monitoring for suspicious activities can help mitigate risks until updates are applied.
See every vulnerability recorded for mariadb →
FAQ
CVE-2025-13699 is the identifier for the vulnerability affecting the mariadb-dump utility, which allows for remote code execution due to improper path validation.
You can check if your installation is affected by using the Vulert playground at Vulert Scanner, which analyzes your manifest file for vulnerabilities.
The risks include unauthorized access to the database, potential data loss, and the ability for attackers to execute arbitrary commands on the server.
Yes, temporarily restricting access to the mariadb-dump utility and monitoring for unusual activities can help mitigate risks until the patch is applied.
If immediate updates are not possible, ensure that your firewall settings are strict and monitor your database for any unauthorized access attempts.
Related vulnerabilities
Recent vulnerabilities recorded for mariadb.
