EIP-2026-102929

PRE-CVE

MySQL 4.0.17 (Linux) - User-Defined Function (UDF) Dynamic Library (1)

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-102929. PoCs published by Marco Ivaldi.

AI-analyzed exploit summary This exploit demonstrates a local privilege escalation via MySQL User Defined Functions (UDFs). It creates a custom UDF library that executes system commands with root privileges when MySQL is run as root.

Description

MySQL 4.0.17 (Linux) - User-Defined Function (UDF) Dynamic Library (1)

Exploits (1)

exploitdb WORKING POC VERIFIED

by Marco Ivaldi · clocallinux

https://www.exploit-db.com/exploits/1181

View Code ZIP pw:eip

This exploit demonstrates a local privilege escalation via MySQL User Defined Functions (UDFs). It creates a custom UDF library that executes system commands with root privileges when MySQL is run as root.

Classification

Working Poc 100%

Attack Type

Lpe

Complexity

Moderate

Reliability

Reliable

Target: MySQL 4.0.17

Auth required

Prerequisites: MySQL running as root · Ability to load custom UDFs · Write access to MySQL's plugin directory

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026