CVE-2026-101610

A flaw was found in MySQL's Server Optimizer component. A remote attacker with high administrative privileges can exploit this vulnerability across network protocols to trigger a complete Denial of Service (DoS). Successful exploitation causes the database server to hang or repeatedly crash, disrupting service availability for legitimate users.

This vulnerability is rated as Moderate severity because exploitation requires high-level privileges to interact with the database server, significantly constraining the threat scope despite the potential for service unavailability. In typical Red Hat Enterprise Linux environments, MySQL databases are deployed within internal network tiers and access is restricted to authenticated accounts under the principle of least privilege. Although an attacker with administrative credentials could trigger an unexpected daemon crash or hang via the query optimizer, there is no impact on data confidentiality or integrity. Consequently, systems with properly segmented administrative access remain resilient against unauthorized or unprivileged disruption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.