CVE-2026-44169 MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions
Users with EXECUTE privileges via roles can view stored routine definitions without SHOW CREATE ROUTINE privileges, exposing sensitive code logic.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-44169?
CVE-2026-44169 is a medium-severity missing authorization vulnerability in Mariadb Mariadb, published on 12 Jun 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.
Weakness: CWE-863
Which versions are affected by CVE-2026-44169?
3 open source packages ship an affected version, including mariadb, mariadb-min and mysql-client. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
mariadb Bitnami | From 11.4.1 | 11.4.11, 11.8.7, 12.3.2 |
mariadb-min Bitnami | From 11.4.1 | 11.4.11, 11.8.7, 12.3.2 |
mysql-client Bitnami | From 11.4.1 | 11.4.11, 11.8.7, 12.3.2 |
Products include Mariadb Mariadb.
How do I fix CVE-2026-44169?
Upgrade mariadb to a fixed version for your release line: 11.4.11, 11.8.7 or 12.3.2.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-44169 being exploited?
There is no known exploitation of CVE-2026-44169 in the wild and no public exploit code.
Other vulnerabilities in Mariadb Mariadb
- CVE-2026-49261 MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`
- CVE-2026-85746 MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections
- CVE-2026-85748 MariaDB: Use-after-free with a large number of SYS_REFCURSOR's
- CVE-2026-92262 MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.
- CVE-2023-26785 Code injection in n/a
Sources
Also known as ALPINE-CVE-2026-44169, BELL-CVE-2026-44169, BIT-mariadb-2026-44169, BIT-mariadb-min-2026-44169, BIT-mysql-client-2026-44169, DEBIAN-CVE-2026-44169 and 9 more.