CVE-2026-119210

The MariaDB Connector/J (versions 3.0.0 until 3.3.7, 3.4.5, and 3.5.11) is vulnerable to an information disclosure issue where the ClientMessage.validateLocalFileName() check uses an improper regular expression. This allows it to match LOAD DATA LOCAL INFILE text within quoted identifiers, string...

CVE-2026-119210: mariadb-corporation mariadb-connector-j: MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the ClientMessage.validateLocalFileName check used a regular expression that could match LOAD DATA LOCAL INFILE text inside quoted identifiers, string...