CVE-2026-55215: Mariadb Auth Switch Premature Plugin Check

Authentication plugin capabilities are validated against the previous plugin instance before instantiating the target plugin during an authentication switch, which can allow cleartext password transmission before certificate validation.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0JS
greprules fetch cve-2026-55215-mariadb-auth-switch-premature-plugin-check --engine opengrep

Description

Authentication plugin capabilities are validated against the previous plugin instance before instantiating the target plugin during an authentication switch, which can allow cleartext password transmission before certificate validation.