CVE-2026-44168 | MariaDB Server up to 12.3.1 joiner os command injection (GHSA-vwf7-w26c-9w5h / EUVD-2026-36514)

A vulnerability, which was classified as critical, was found in MariaDB Server up to 10.6.25/10.11.16/11.4.10/11.8.6/12.3.1. Impacted is an unknown function of the component joiner Handler. Such manipulation leads to os command injection. This vulnerability is traded as CVE-2026-44168. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.