Hardcoded Credential Exposure in Bitnami MariaDB Galera Container Images

CVE-2026-47847

What is CVE-2026-47847?

Bitnami MariaDB Galera container images and Helm chart present a security concern due to hardcoded default credentials for the Galera replication health-check user. The use of environment variables MARIADB_REPLICATION_USER and MARIADB_REPLICATION_PASSWORD defaults to 'monitor', which poses a risk as this user possesses REPLICATION CLIENT privileges accessible from any host. Furthermore, the Helm chart does not allow users to configure these critical credentials, leading to deployments that rely on a widely known and insecure default setup. This vulnerability underlines the necessity for secure credential management in containerized environments.

References