CVE-2026-25212: An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights…

PriorityP261critical9.9CVSS 3.1

AVNACLPRLUINSCCHIHAH

EPSS

0.29%

20.5th percentile

An issue was discovered in Percona PMM before 3.7. Because an internal database user retains specific superuser privileges, an attacker with pmm-admin rights can abuse the "Add data source" feature to break out of the database context and execute shell commands on the underlying operating system.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
percona	monitoring_and_management	< 3.7.0	3.7.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.