CVE-2026-101623

A flaw was found in the Optimizer component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact.

This vulnerability is rated as Moderate because exploitation requires an attacker to already possess high-level administrative database privileges, significantly limiting the scope of unauthorized access. While an authenticated administrative user can trigger an unexpected service termination or hang via specially crafted queries in the server optimizer, the impact is strictly confined to service availability with no compromise to data confidentiality or system integrity. In standard Red Hat Enterprise Linux environments, MySQL database instances are isolated from untrusted networks, and administrative privileges are restricted, reducing the likelihood of widespread operational disruption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.