A security flaw has been found in MariaDB, the popular open-source database software many websites use to store content, user data, and other critical site information. The issue affects specific older MariaDB versions (10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1) if you have the wsrep_notify_cmd setting enabled. When this setting is active, the database will run any hidden shell commands embedded in the name of a node joining your database cluster, creating an exploit opportunity for bad actors.
If used by an attacker, this flaw could let them run unauthorized commands on your server. This may lead to stolen customer data, unwanted changes to your website, or even full control of your hosting account, depending on your database’s access permissions.
Fixed versions of MariaDB that resolve this vulnerability are now available: 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2. If you cannot upgrade your MariaDB installation right now, you can avoid this risk by disabling the wsrep_notify_cmd setting.
Source: NVD (National Vulnerability Database) — https://nvd.nist.gov/vuln/detail/CVE-2026-49261
