2487957 – (CVE-2026-49261) CVE-2026-49261 mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd

Bug 2487957 (CVE-2026-49261) - CVE-2026-49261 mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd

Summary: CVE-2026-49261 mariadb: MariaDB Server: Arbitrary code execution via wsrep_no...

Keywords:
Status:	NEW
Alias:	CVE-2026-49261
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	high
Severity:	high
Target Milestone:	---
Assignee:	Product Security
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+	depends on / blocked

Reported:	2026-06-11 18:01 UTC by OSIDB Bzimport
Modified:	2026-06-30 14:17 UTC (History)
CC List:	2 users (show)
Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments	(Terms of Use)

Links
System	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2026:33093	None	None	None	2026-06-29 22:37:56 UTC
Red Hat Product Errata	RHSA-2026:33412	None	None	None	2026-06-30 06:47:57 UTC
Red Hat Product Errata	RHSA-2026:33464	None	None	None	2026-06-30 11:03:21 UTC
Red Hat Product Errata	RHSA-2026:33481	None	None	None	2026-06-30 12:46:48 UTC
Red Hat Product Errata	RHSA-2026:33482	None	None	None	2026-06-30 14:17:03 UTC

Description OSIDB Bzimport 2026-06-11 18:01:29 UTC

MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with  `wsrep_notify_cmd` enabled would execute shell commands embedded in the name of the joiner node. This is fixed in 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2. As a workaround, anyone who cannot upgrade now should disable `wsrep_notify_cmd`.

Comment 3 errata-xmlrpc 2026-06-29 22:37:56 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:33093 https://access.redhat.com/errata/RHSA-2026:33093

Comment 4 errata-xmlrpc 2026-06-30 06:47:56 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:33412 https://access.redhat.com/errata/RHSA-2026:33412

Comment 5 errata-xmlrpc 2026-06-30 11:03:20 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:33464 https://access.redhat.com/errata/RHSA-2026:33464

Comment 6 errata-xmlrpc 2026-06-30 12:46:47 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:33481 https://access.redhat.com/errata/RHSA-2026:33481

Comment 7 errata-xmlrpc 2026-06-30 14:17:02 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:33482 https://access.redhat.com/errata/RHSA-2026:33482

Note You need to log in before you can comment on or make changes to this bug.