---
id: CVE-2026-97380
title: >-
  mariadb: mariadb: Privilege escalation via empty password in GRANT PROXY
  statement (CVE-2026-97380)
summary: >-
  A flaw was found in MariaDB. An authenticated attacker with low privileges can
  achieve privilege escalation by modifying the password of another database
  account. This vulnerability occurs because the database server checks
  incorrect autho…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: vendor
cwe:
  - CWE-266
  - CWE-620
  - CWE-863
vendor: Red Hat
product: Red Hat Enterprise Linux 8
affected:
  - enterprise_linux 10
  - enterprise_linux 7
  - enterprise_linux 8
  - enterprise_linux 9
  - hardened_images
  - openstack_platform_13_queens
published: '2026-10-16'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T17:43:19+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97380.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97380.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-97380'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2554198'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-97380'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-97380'
  - url: >-
      https://github.com/MariaDB/server/commit/dbd60d0ad8daa2d01050346aa50b7b102490e456
  - url: 'https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19'
  - url: 'https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28'
  - url: 'https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13'
  - url: 'https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9'
  - url: 'https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3'
  - url: 'https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2'
  - url: 'https://github.com/MariaDB/server/security/advisories/GHSA-625w-4hgq-qwmr'
  - url: 'https://jira.mariadb.org/browse/MDEV-40470'
tags:
  - csaf
  - vex
  - red-hat
  - cve.org
ingestedAt: '2026-10-16T17:24:46.887Z'
---

## Overview

A flaw was found in MariaDB. An authenticated attacker with low privileges can achieve privilege escalation by modifying the password of another database account. This vulnerability occurs because the database server checks incorrect authorization privileges when processing a GRANT PROXY statement containing an empty password clause, allowing the attacker to compromise target accounts.

## Vendor advisories

- **Red Hat VEX** · Important · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Hardened Images, Red Hat OpenStack Platform 13 (Queens) · no fix planned: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, … · updated 2026-10-16 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97380.json)

**mariadb: mariadb: Privilege escalation via empty password in GRANT PROXY statement** — rated Important by Red Hat. Released 2026-10-16.

Affected:

- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat Hardened Images
- Red Hat OpenStack Platform 13 (Queens)

No fix planned:

- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat Enterprise Linux 9
- Red Hat Hardened Images
- Red Hat OpenStack Platform 13 (Queens)

## Remediation

Affected