CVE-2026-47847

Bitnami MariaDB Galera container images and Helm chart are affected by a hardcoded default credential vulnerability in the Galera replication health-check user. The MARIADB_REPLICATION_USER and MARIADB_REPLICATION_PASSWORD environment variables defaulted to monitor and monitor respectively. This user is granted REPLICATION CLIENT privileges from any host ('%'). The Bitnami Helm chart for MariaDB Galera did not expose parameters to configure this user's credentials, resulting in all chart deployments using this publicly known credential by default. Affected versions — Container image: 10.6.x prior to 10.6.27-photon-5-r0; 10.11.x prior to 10.11.17-photon-5-r1; 11.4.x prior to 11.4.12-photon-5-r0; 11.8.x prior to 11.8.7-photon-5-r1; 12.3.x prior to 12.3.2-photon-5-r0 / 12.3.2-debian-12-r0. Helm chart: prior to 18.3.0.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/bitnami/containers/security/advisories/GHSA-xcv9-cg8m-3mf2

Configurations

No configuration.

History

18 Jun 2026, 21:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-06-18 20:16

Updated : 2026-06-22 20:23

NVD link : CVE-2026-47847

Mitre link : CVE-2026-47847

CVE.ORG link : CVE-2026-47847

JSON object : View

Products Affected

No product.

CWE

CWE-798

Use of Hard-coded Credentials

{"id": "CVE-2026-47847", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-47847", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-18T20:24:19.143214Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@vmware.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security@vmware.com", "affectedData": [{"vendor": "Bitnami", "product": "bitnami/mariadb-galera", "versions": [{"status": "affected", "version": "10.6.0", "lessThan": "10.6.27-photon-5-r0", "versionType": "custom"}, {"status": "affected", "version": "10.11.0", "lessThan": "10.11.17-photon-5-r1", "versionType": "custom"}, {"status": "affected", "version": "11.4.0", "lessThan": "11.4.12-photon-5-r0", "versionType": "custom"}, {"status": "affected", "version": "11.8.0", "lessThan": "11.8.7-photon-5-r1", "versionType": "custom"}, {"status": "affected", "version": "12.3.0", "lessThan": "12.3.2-photon-5-r0", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Bitnami", "product": "bitnami/mariadb-galera Helm chart", "versions": [{"status": "affected", "version": "0", "lessThan": "18.3.0", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-06-18T20:16:13.740", "references": [{"url": "https://github.com/bitnami/containers/security/advisories/GHSA-xcv9-cg8m-3mf2", "source": "security@vmware.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "security@vmware.com", "description": [{"lang": "en", "value": "CWE-798"}]}], "descriptions": [{"lang": "en", "value": "Bitnami MariaDB Galera container images and Helm chart are affected by a hardcoded default credential vulnerability in the Galera replication health-check user. The MARIADB_REPLICATION_USER and MARIADB_REPLICATION_PASSWORD environment variables defaulted to monitor and monitor respectively. This user is granted REPLICATION CLIENT privileges from any host ('%'). The Bitnami Helm chart for MariaDB Galera did not expose parameters to configure this user's credentials, resulting in all chart deployments using this publicly known credential by default.\n\nAffected versions \u2014 Container image: 10.6.x prior to 10.6.27-photon-5-r0; 10.11.x prior to 10.11.17-photon-5-r1; 11.4.x prior to 11.4.12-photon-5-r0; 11.8.x prior to 11.8.7-photon-5-r1; 12.3.x prior to 12.3.2-photon-5-r0 / 12.3.2-debian-12-r0. Helm chart: prior to 18.3.0."}], "lastModified": "2026-06-22T20:23:26.770", "sourceIdentifier": "security@vmware.com"}