MariaDB server versions 10.6.1 to 10.6.26, 10.11.1 to 10.11.17, 11.4.1 to 11.4.11, 11.8.1 to 11.8.7, and 12.3.1 with the wsrep_notify_cmd feature enabled are vulnerable to an OS command injection (CWE-78). This vulnerability allows arbitrary shell commands to be executed via specially crafted joiner node names. The issue has been fixed in subsequent patch releases 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2. The vulnerability has a CVSS 3.1 score of 10.0, indicating critical severity with network attack vector, no privileges or user interaction required, and complete confidentiality, integrity, and availability impact. Red Hat advisories confirm the availability of updated packages addressing this issue. Users unable to upgrade immediately should disable wsrep_notify_cmd as a temporary mitigation.

Successful exploitation of this vulnerability allows unauthenticated remote attackers to execute arbitrary OS commands on the affected MariaDB server, resulting in full system compromise. The vulnerability impacts confidentiality, integrity, and availability of the system with critical severity (CVSS 10.0).

A fix is available in MariaDB server versions 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2. Users should upgrade to these or later versions to remediate the vulnerability. For those unable to upgrade immediately, disabling the wsrep_notify_cmd feature is recommended as a temporary workaround. Refer to vendor advisories such as Red Hat's for detailed update instructions and package availability.