{"id":"CVE-2026-97380","title":"mariadb: mariadb: Privilege escalation via empty password in GRANT PROXY statement (CVE-2026-97380)","summary":"A flaw was found in MariaDB. An authenticated attacker with low privileges can achieve privilege escalation by modifying the password of another database account. This vulnerability occurs because the database server checks incorrect autho…","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"vendor","cwe":["CWE-266","CWE-620","CWE-863"],"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","affected":["enterprise_linux 10","enterprise_linux 7","enterprise_linux 8","enterprise_linux 9","hardened_images","openstack_platform_13_queens"],"published":"2026-10-16","updated":"2026-10-16","sourceUpdated":"2026-10-16T17:43:19+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97380.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97380.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-97380"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554198"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-97380"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97380"},{"url":"https://github.com/MariaDB/server/commit/dbd60d0ad8daa2d01050346aa50b7b102490e456"},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19"},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28"},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13"},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9"},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3"},{"url":"https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2"},{"url":"https://github.com/MariaDB/server/security/advisories/GHSA-625w-4hgq-qwmr"},{"url":"https://jira.mariadb.org/browse/MDEV-40470"}],"tags":["csaf","vex","red-hat","cve.org"],"ingestedAt":"2026-10-16T17:24:46.887Z","slug":"CVE-2026-97380","body":"## Overview\n\nA flaw was found in MariaDB. An authenticated attacker with low privileges can achieve privilege escalation by modifying the password of another database account. This vulnerability occurs because the database server checks incorrect authorization privileges when processing a GRANT PROXY statement containing an empty password clause, allowing the attacker to compromise target accounts.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Important · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images, Red Hat OpenStack Platform 13 (Queens) · no fix planned: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, … · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97380.json)\n\n**mariadb: mariadb: Privilege escalation via empty password in GRANT PROXY statement** — rated Important by Red Hat. Released 2026-10-16.\n\nAffected:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 7\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n- Red Hat Hardened Images\n- Red Hat OpenStack Platform 13 (Queens)\n\nNo fix planned:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 7\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n- Red Hat Hardened Images\n- Red Hat OpenStack Platform 13 (Queens)\n\n## Remediation\n\nAffected","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":48.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}