CVE-2026-47847_CVE-2026-47847

5.3 / 10

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

Bitnami MariaDB Galera container images and Helm chart are affected by a hardcoded default credential vulnerability in the Galera replication health-check user. The MARIADB_REPLICATION_USER and MARIADB_REPLICATION_PASSWORD environment variables defaulted to monitor and monitor respectively. This user is granted REPLICATION CLIENT privileges from any host ('%'). The Bitnami Helm chart for MariaDB Galera did not expose parameters to configure this user's credentials, resulting in all chart deployments using this publicly known credential by default.

Affected versions — Container image: 10.6.x prior to 10.6.27-photon-5-r0; 10.11.x prior to 10.11.17-photon-5-r1; 11.4.x prior to 11.4.12-photon-5-r0; 11.8.x prior to 11.8.7-photon-5-r1; 12.3.x prior to 12.3.2-photon-5-r0 / 12.3.2-debian-12-r0. Helm chart: prior to 18.3.0.

Basic Information

ID CVE-2026-47847

Source vmware

Published Jun 18, 2026 at 18:37

Modified Jun 18, 2026 at 20:24

Affected Product

Vendor Bitnami

Product bitnami/mariadb-galera

Version 10.6.0

Affected Versions Bitnami bitnami/mariadb-galera 10.6.0
Bitnami bitnami/mariadb-galera 10.11.0
Bitnami bitnami/mariadb-galera 11.4.0
Bitnami bitnami/mariadb-galera 11.8.0
Bitnami bitnami/mariadb-galera 12.3.0
Bitnami bitnami/mariadb-galera Helm chart 0

CWE Classification

CWE-798

References

github.com /bitnami/containers/security/advisories/GHSA-xcv9-cg8m-3mf2

{
    "lastseen": "",
    "description": "Bitnami MariaDB Galera container images and Helm chart are affected by a hardcoded default credential vulnerability in the Galera replication health-check user. The MARIADB_REPLICATION_USER and MARIADB_REPLICATION_PASSWORD environment variables defaulted to monitor and monitor respectively. This user is granted REPLICATION CLIENT privileges from any host ('%'). The Bitnami Helm chart for MariaDB Galera did not expose parameters to configure this user's credentials, resulting in all chart deployments using this publicly known credential by default.\n\nAffected versions \u2014 Container image: 10.6.x prior to 10.6.27-photon-5-r0; 10.11.x prior to 10.11.17-photon-5-r1; 11.4.x prior to 11.4.12-photon-5-r0; 11.8.x prior to 11.8.7-photon-5-r1; 12.3.x prior to 12.3.2-photon-5-r0 / 12.3.2-debian-12-r0. Helm chart: prior to 18.3.0.",
    "published": "2026-06-18T18:37:47.677Z",
    "modified": "2026-06-18T20:24:27.928Z",
    "type": "cve",
    "title": "CVE-2026-47847",
    "source": "vmware",
    "references": "https://github.com/bitnami/containers/security/advisories/GHSA-xcv9-cg8m-3mf2",
    "id": "CVE-2026-47847",
    "bulletinFamily": "",
    "cwe": [
        "CWE-798"
    ],
    "cvelist": null,
    "sourceData": "Bitnami bitnami/mariadb-galera 10.6.0\nBitnami bitnami/mariadb-galera 10.11.0\nBitnami bitnami/mariadb-galera 11.4.0\nBitnami bitnami/mariadb-galera 11.8.0\nBitnami bitnami/mariadb-galera 12.3.0\nBitnami bitnami/mariadb-galera Helm chart 0",
    "sourceHref": "",
    "cvss": {
        "score": 5.3,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "bitnami/mariadb-galera",
    "version": "10.6.0",
    "vendor": "Bitnami",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}