🎯 New Report #3876430: MariaDB GRANT PROXY permits unauthorized authentication changes and administrator account takeover
🔺Severity: High
👽 Reporter: kevin mizu
⭐️ Reputation: 6792
🛠 State: resolved
💼 Team: MariaDB
💵 Bounty: null
🕐 Submitted: 2026-07-20
⏰ Disclosed: 2026-09-07 20:07:40
📝 Summary: A vulnerability was discovered in MariaDB that allowed an authenticated user with only USAGE privileges to change the password of an existing administrator account. This was achieved through the grantee clause of the GRANT PROXY statement, which permitted bypassing the authorization checks and directly modifying the target account's authentication information. The vulnerability was tested on MariaDB versions 12.3.2 and 13.1.0.
📂 Report JSON File: 3876430
@hackeronereports