CVE-2026-25212 in Percona

Sumário (Inglês)

An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights can abuse the "Add data source" feature to break out of the database context and execute shell commands on the underlying operating system.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Responsável

MITRE

Reservar

30/01/2026

Divulgação

02/04/2026

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
354931	Percona Add data source Elevação de Privilégios	78	Não definido	Correção oficial	CVE-2026-25212

Fontes

• MITRE
• NVD
• CVE Details