CVE-2025-13699 is a path traversal vulnerability (CWE-22) in the mariadb-dump utility of MariaDB as shipped by Red Hat. The flaw arises from improper validation of user-supplied paths before file operations, enabling remote attackers to execute arbitrary code if they can interact with the mariadb-dump utility. This vulnerability affects multiple MariaDB RPM packages in Red Hat Hardened Images. Red Hat has classified the severity as high and notes that no effective mitigation or fix currently meets their standards for ease of use, applicability, or stability.

An attacker who can interact with the mariadb-dump utility may execute arbitrary code with the privileges of the current user. This includes the ability to create, overwrite, or read critical files, potentially bypassing security mechanisms, exposing sensitive data, or causing denial of service by corrupting important files. The vulnerability impacts confidentiality, integrity, and availability of affected systems.

Red Hat currently does not provide an official fix or mitigation that meets their criteria for this vulnerability. Users are advised to monitor Red Hat advisories for updates. Until a fix is available, limiting access to the mariadb-dump utility and exercising caution with user inputs may reduce risk, but no guaranteed mitigation exists.