CVE-2026-47847
Description
Bitnami MariaDB Galera container images and Helm chart are affected by a hardcoded default credential vulnerability in the Galera replication health-check user. The MARIADB_REPLICATION_USER and MARIADB_REPLICATION_PASSWORD environment variables defaulted to monitor and monitor respectively. This user is granted REPLICATION CLIENT privileges from any host ('%'). The Bitnami Helm chart for MariaDB Galera did not expose parameters to configure this user's credentials, resulting in all chart deployments using this publicly known credential by default. Affected versions — Container image: 10.6.x prior to 10.6.27-photon-5-r0; 10.11.x prior to 10.11.17-photon-5-r1; 11.4.x prior to 11.4.12-photon-5-r0; 11.8.x prior to 11.8.7-photon-5-r1; 12.3.x prior to 12.3.2-photon-5-r0 / 12.3.2-debian-12-r0. Helm chart: prior to 18.3.0.
How to fix
- Bitnami bitnami/mariadb-galera10.6.27-photon-5-r0, 10.11.17-photon-5-r1, 11.4.12-photon-5-r0, 11.8.7-photon-5-r1, 12.3.2-photon-5-r0 or later
- Bitnami bitnami/mariadb-galera Helm chart18.3.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Bitnami bitnami/mariadb-galera | 10.6.0 ≤ v < 10.6.27-photon-5-r0, 10.11.0 ≤ v < 10.11.17-photon-5-r1, 11.4.0 ≤ v < 11.4.12-photon-5-r0, 11.8.0 ≤ v < 11.8.7-photon-5-r1, 12.3.0 ≤ v < 12.3.2-photon-5-r0 | 10.6.27-photon-5-r0, 10.11.17-photon-5-r1, 11.4.12-photon-5-r0, 11.8.7-photon-5-r1, 12.3.2-photon-5-r0 |
| Bitnami bitnami/mariadb-galera Helm chart | v < 18.3.0 | 18.3.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.