EUVD-2026-18364
GHSA-hm6f-x2ww-p497
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Primary rating from Vendor (mitre) · only source for this CVE.
CVSS VectorVendor: mitre
Lifecycle Timeline
5DescriptionCVE.org
An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights can abuse the "Add data source" feature to break out of the database context and execute shell commands on the underlying operating system.
AnalysisAI
Percona PMM (Percona Monitoring and Management) versions prior to 3.7 allow authenticated users with pmm-admin privileges to execute arbitrary operating system commands by exploiting excessive database superuser privileges through the 'Add data source' feature. This privilege escalation vulnerability enables container/system breakout from database context to shell access. EPSS score is low (0.04%, 13th percentile) indicating minimal observed exploitation activity, and CISA SSVC assessment confirms no active exploitation with non-automatable attack characteristics, though technical impact is rated total.
Technical ContextAI
Percona PMM is an open-source database monitoring and management platform for MySQL, PostgreSQL, and MongoDB. The vulnerability stems from CWE-250 (Execution with Unnecessary Privileges), where an internal database user account retains excessive superuser privileges beyond operational requirements. PMM's architecture includes a data source management feature accessible to pmm-admin role users. The flaw allows authenticated users to inject commands through the 'Add data source' interface, leveraging the over-privileged database account to escape the intended SQL execution context and gain shell access on the host operating system. This represents a classic privilege escalation through insufficient privilege separation in a multi-tenant monitoring platform where database-level credentials should be restricted to read-only monitoring operations.
RemediationAI
Upgrade to Percona PMM version 3.7.0 or later, as confirmed by the vendor release notes at https://docs.percona.com/percona-monitoring-and-management/3/release-notes/3.7.0.html. The 3.7.0 release explicitly addresses CVE-2026-25212 by reducing superuser privileges for internal database accounts to the minimum required for monitoring operations. If immediate upgrade is not feasible, implement compensating controls: restrict pmm-admin role assignment to only essential personnel following least-privilege principles, enable audit logging for all 'Add data source' operations to detect abuse attempts, deploy network segmentation to isolate PMM server from critical production systems limiting lateral movement post-exploitation, and implement MFA for pmm-admin credential access. Note that restricting data source features may impact legitimate monitoring workflows and should be tested in non-production environments. No workaround fully eliminates risk-patching to 3.7.0 is the only complete remediation.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-250 – Execution with Unnecessary Privileges
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today