MariaDB server contained an authorization bypass vulnerability (CWE-863, CWE-266) where the FILE privilege was not properly verified for SELECT ... INTO OUTFILE and SELECT ... INTO DUMPFILE statements if the FROM clause contained only subqueries. This flaw allowed low-privileged authenticated users to write arbitrary files to the server filesystem, potentially leading to data corruption, information disclosure, or denial of service. The vulnerability affects multiple MariaDB versions as specified and has been addressed by official patches in later versions. Red Hat has issued advisories and updates for affected products, recommending upgrades to fixed versions.

A low-privileged authenticated user can bypass the FILE privilege check and write arbitrary files to the server filesystem. This can result in unauthorized file creation or modification, leading to potential data corruption, sensitive information disclosure, or denial of service by filling or corrupting disk space. There is no direct confidentiality impact reported, but integrity and availability impacts are high. No known exploits in the wild have been reported.

Official patches are available and should be applied to remediate this vulnerability. Upgrade affected MariaDB server versions to 10.6.26, 10.11.17, 11.4.11, 11.8.7, or 12.3.2 or later. Red Hat has released security updates for their affected products, including MariaDB 10.11.18 in RHEL 10. Users should follow vendor guidance and apply these updates promptly. No alternative mitigations are specified in the advisory.