CVE-2026-34967 Adminer sql-log Plugin 5.3.0 through 5.4.2 Arbitrary File Write
Authenticated users can exploit path traversal in the sql-log plugin to write arbitrary files, potentially leading to code execution.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-34967?
CVE-2026-34967 is a medium-severity path traversal vulnerability in vrana adminer, published on 25 Aug 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Adminer versions 5.3.0 through 5.4.2 with the sql-log plugin enabled contain an arbitrary file write vulnerability in the ns parameter of plugins/sql-log.php. An authenticated user can supply path traversal sequences in the ns parameter to write arbitrary .sql files with attacker-controlled content to any writable directory on the host.
Weakness: CWE-73
Which versions are affected by CVE-2026-34967?
How do I fix CVE-2026-34967?
Upgrade to a fixed version.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-34967 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-34967 exists.
Sources
Also known as DEBIAN-CVE-2026-34967, GHSA-49h4-j9cq-22wg, GHSA-75xm-qwfq-9wp5, UBUNTU-CVE-2026-34967.