CVE-2026-101616

A flaw was found in the JSON component of MySQL Server and MySQL Cluster. A remote attacker with low-level privileges and network access can exploit this vulnerability to cause the server to hang or crash repeatedly. Successful exploitation results in a complete Denial of Service (DoS) of the affected database service.

This vulnerability is rated as having Moderate impact for Red Hat Enterprise Linux because exploitation is limited to a denial of service and requires valid user credentials to connect to the database service. Although an authenticated attacker can disrupt service availability by triggering an unexpected crash or process hang through JSON queries, the issue does not permit unauthorized data access or modification. Deployments that restrict database access to trusted hosts further limit exposure to unauthorized clients.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.