Threats tagged 'bit-mariadb-2026-49261'

MariaDB server versions with the wsrep_notify_cmd feature enabled are vulnerable to command injection via the name of a joiner node. This vulnerability allows remote attackers to execute arbitrary shell commands on the server, potentially leading to full system compromise. Multiple MariaDB versions are affected. A security update is available that fixes this issue. Disabling the wsrep_notify_cmd feature is a recommended workaround for those unable to upgrade immediately.