MariaDB server versions from 10.6.1 through 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2 contain a flaw in the view FRM parser that fails to safely encode newline characters embedded in usernames. A user who can create new users and grant view creation privileges can craft a username containing additional view metadata; the parser then interprets part of that username as security metadata, effectively elevating the user's privileges beyond their intended scope. This flaw exposes a privilege escalation path that could allow an attacker to gain higher database access rights, impacting confidentiality, integrity, and availability at the database level.

The vulnerability affects MariaDB Server deployments that run any of the following releases: 10.6.1 up to and including 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2. All other MariaDB Server versions are considered not affected according to the advisory.

The CVSS base score of 7.2 indicates a high likelihood of impact for a successful exploit. Although the EPSS score is not publicly available, the lack of any listing in CISA's KEV catalog suggests that there are no known widespread attacks. The attack would require a user with the CREATE USER and CREATE VIEW WITH GRANT OPTION privileges; if such a privilege exists locally or can be granted remotely, the attacker can craft a malicious username to trigger the parser flaw and elevate privileges. Given the moderate to high severity and the relatively narrow prerequisite, the immediate risk to systems with privileged users remains significant until the fix is applied.