CVE-2026-48165

A flaw was found in MariaDB server. A high-privileged MariaDB user could exploit this vulnerability by manipulating specific global system variables, namely wsrep_sst_receive_address or wsrep_sst_donor. This manipulation could allow the user to execute arbitrary shell commands as the user ID of the mariadbd process on a galera joiner node. The primary impact of this flaw is arbitrary code execution.

This Important flaw in MariaDB server allows a high-privileged database user to achieve arbitrary code execution on a Galera joiner node. By manipulating specific global system variables, an attacker can execute shell commands as the mariadbd process user, significantly escalating privileges within the system. This risk is present in Red Hat products utilizing MariaDB with Galera Cluster deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.