[MDEV-39493] FILE privilege isn't checked for derived - Jira

XML

Word

Printable

Details

Type: Bug
Status: Closed (View Workflow)
Priority: Blocker
Resolution: Fixed
Affects Version/s: 10.6, 10.11, 11.4, 11.8, 12.3
Fix Version/s: 10.6.26, 10.11.17, 11.4.11, 11.8.7, 12.3.2
Component/s: Authentication and Privilege System
Labels:
None

Bug Category:
Can result in unexpected behaviour
Release Note Summary:
FILE privilege isn't checked for derived table

Description

Test

--error ER_ACCESS_DENIED_ERROR

evalp select * into outfile '$MYSQLTEST_VARDIR/tmp/3701920.out' from (select 'hello') t;

fails with

mysqltest: At line 178: query 'select * into outfile '$MYSQLTEST_VARDIR/tmp/3701920.out' from (select 'hello') t' succeeded - should have failed with error ER_ACCESS_DENIED_ERROR (1045)...

Reported by Tomer Fichman

Attachments

Issue Links

links to

CVE-2026-44173

Activity

People

Assignee:: Sergei Golubchik

Reporter:: Sergei Golubchik

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 2026-04-29 11:41

Updated:: 2026-06-18 14:10

Resolved:: 2026-04-29 15:37

Time Tracking

Estimated:

Remaining:

Logged:

1.25h

Git Integration

Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.