CVE-2009-4030: MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on...

Security readout for executives and security teams

CVE-2009-4030 is an old MySQL privilege-check bypass affecting MySQL 5.1.x before 5.1.41. A local user could misuse CREATE TABLE options for MyISAM tables involving data or index directories and symlinked paths. It matters mainly where legacy MySQL remains deployed and lower-privileged local/database users are present. Exposure is most likely on legacy systems running MySQL 5.1.x before 5.1.41. Risk increases on shared database hosts or environments where less-trusted users can create MyISAM tables and use DATA DIRECTORY or INDEX DIRECTORY features. Prioritize remediation if legacy MySQL 5.1 is still in production, especially on shared or multi-user systems. For modern environments no longer running this branch, urgency is low after verification. Treat remaining instances as technical debt with security exposure. Mitigation focus: Inventory MySQL versions and identify any 5.1.x instances before 5.1.41.; Upgrade to MySQL 5.1.41 or later, or apply fixed vendor packages.; Review Ubuntu, Red Hat, SUSE, and Apple advisories if using their packages..

Prepared

Jun 28, 2026, 12:21 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.