CVE-2026-101620

A flaw was found in the MySQL Server Optimizer component. An authenticated remote attacker with low privileges and network access can exploit this vulnerability to cause the server to hang or repeatedly crash. Successful exploitation results in a complete Denial of Service (DoS) of the database service.

This vulnerability is rated as having a Moderate impact for Red Hat environments because successful exploitation is confined to service availability and requires an attacker to already possess valid database authentication credentials. In standard enterprise deployments, database instances are restricted to authorized application accounts and not exposed directly to untrusted networks, which limits the blast radius. Furthermore, the issue cannot be leveraged to access, alter, or exfiltrate sensitive stored data.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.