diff --git a/src/DB_Command.php b/src/DB_Command.php
index f3acbdac..53a895d3 100644
--- a/src/DB_Command.php
+++ b/src/DB_Command.php
@@ -1835,6 +1835,11 @@ private static function run( $cmd, $assoc_args = [], $send_to_shell = true, $int
 			$required['default-character-set'] = constant( 'DB_CHARSET' );
 		}
 
+		// Add --ssl-verify-server-cert for MariaDB to suppress passwordless login warning.
+		if ( 'mariadb' === Utils\get_db_type() && ! isset( $assoc_args['ssl-verify-server-cert'] ) ) {
+			$required['ssl-verify-server-cert'] = true;
+		}
+
 		// Using 'dbuser' as option name to workaround clash with WP-CLI's global WP 'user' parameter, with 'dbpass' also available for tidiness.
 		if ( isset( $assoc_args['dbuser'] ) ) {
 			$required['user'] = $assoc_args['dbuser'];
@@ -2075,6 +2080,7 @@ private static function get_mysql_args( $assoc_args ) {
 			'ssl-fips-mode',
 			'ssl-key',
 			'ssl-mode',
+			'ssl-verify-server-cert',
 			'syslog',
 			'table',
 			'tee',