MariaDB is a popular open-source database system used by many websites to store content, customer information, and other important site data. A security flaw (tracked as CVE-2026-49261) has been identified in specific MariaDB versions that have the `wsrep_notify_cmd` feature enabled: when this setting is active, the database server will run any hidden commands embedded in the name of a new node that joins a MariaDB cluster. This could allow an unauthorized user to run commands on your server, which may lead to data theft, site outages, or other harmful activity.
This vulnerability impacts MariaDB versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1, but only if the `wsrep_notify_cmd` setting is turned on. Patched versions that resolve this issue are 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2. If you cannot upgrade to one of these updated versions right now, disabling the `wsrep_notify_cmd` feature will eliminate the risk associated with this flaw.
Source: NVD (National Vulnerability Database) — https://nvd.nist.gov/vuln/detail/CVE-2026-49261
