🎯 New Report #3889667: ACL cache collision lets a role inherit privileges from a same-named socket user
🔺Severity: null
👽 Reporter: dogeshark
⭐️ Reputation: 403
🛠 State: resolved
💼 Team: MariaDB
💵 Bounty: null
🕐 Submitted: 2026-07-25
⏰ Disclosed: 2026-09-07 19:55:04
📝 Summary: A vulnerability was discovered in MariaDB's database privilege cache where a role and a UNIX-socket user with the same name were not distinguished. When the socket user warmed the cache with their privileges, a different account that activated the same-named role then received the cached user privileges, even though those privileges were never granted to the role.
📂 Report JSON File: 3889667
@hackeronereports