CVE-2026-25212
An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights can abuse the "Add …
Published: 2026-04-02 · CVSS: 9.9 · CVSS 3.1
An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights can abuse the "Add data source" feature to break out of the database context and execute shell commands on the underlying operating system.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7