CVE-2026-55215

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-55215
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55215.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-55215
Aliases
Published
2026-08-28T19:02:49.413Z
Modified
2026-08-30T03:46:50.382587939Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
MariaDB Connector/Node.js: Connector leaks the cleartext password to an MitM despite `ssl: true`
Details

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to versions 3.3.3, 3.4.6, and 3.5.3, when ssl is enabled without a pinned CA or server certificate, MariaDB Connector/Node.js sends credentials before completing certificate fingerprint validation. In lib/cmd/handshake/auth/handshake.js, a server that selects mysqlclearpassword as the initial authentication plugin can receive the password before the post-TLS identity check. In lib/cmd/handshake/authentication.js, an authentication switch can evaluate the previous plugin instead of the requested target plugin, allowing mysqlclearpassword to send the credential first. An active man-in-the-middle can present a self-signed certificate, capture the database password, and use it to authenticate directly even though the connector later rejects the server and closes the connection. This issue is fixed in versions 3.3.3, 3.4.6, and 3.5.3.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55215.json",
    "cwe_ids": [
        "CWE-295",
        "CWE-522"
    ],
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/mariadb-corporation/mariadb-connector-nodejs

Affected ranges

Type
GIT
Repo
https://github.com/mariadb-corporation/mariadb-connector-nodejs
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
514576a5a1fab3ea8498613e259a0b7a764e7302
Fixed
c47d7275835c78c7eb8186cd23e9d57c045c128b
Fixed
ecd36958e6e3bf0e0fa8389546f50c0ed6dbb2ac
Fixed
07e6f631a6052649b72e9aa024583d305ac7611d
Fixed
1d50f7210af2e01bf90b155e073f041952901839
Fixed
14e0f16bd78584b3b24db33c1c6e62e3a3d241a2
Database specific
Show details 
{
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "3.2.4"
        }
    ]
}

Affected versions

0.*
0.7.0
2.*
2.0.3
2.0.5
2.1.0
2.1.1
2.1.2
2.1.3
2.1.4
2.1.5
2.2.0
2.3.0
2.4.0
2.4.1
2.4.2
2.5.0
2.5.1
2.5.2
2.5.3
2.5.4
2.5.6
3.*
3.0.0-ga
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.4.0
3.4.1
3.4.2
3.4.3
3.4.4
3.4.5
3.5.0-rc.0
3.5.1
3.5.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55215.json"