CVE-2026-102523

In MariaDB server versions 10.11.1 through 10.11.18, 11.4.1 through 11.4.12, 11.8.1 through 11.8.8, 12.3.1 through 12.3.2, and 13.0.1 through 13.0.1, an authorization bypass exists due to missing filename encoding in the ALTER TABLE ... CONVERT ... PARTITION statement. An authenticated database u...