Analytical use of cookies
CVE-2026-25212CVSS 9.9Database
CVE-2026-25212: monitoring and management vulnerability
An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights can abuse the "Add data source" feature to break out of the database context and execute shell commands on the underlying operating system.
- CVSS
- 9.9 CRITICAL
- EPSS
- 21.01%
- Known exploited
- not in KEV
- Product
- monitoring and management
What is known
An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights can abuse the "Add data source" feature to break out of the database context and execute shell commands on the underlying operating system.