CVE-2022-25834: Percona Xtrabackup

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

In Percona XtraBackup (PXB) through 2.2.24 and 3.x through 8.0.27-19, a crafted filename on the local file system could trigger unexpected command shell execution of arbitrary commands.

Affected products

• Percona Xtrabackup: up to and including 2.2.24; from 3.0, up to and including 8.0.27-19

Published 2023-06-07. Last modified 2026-06-17.