CVE-2026-101637

A flaw was found in MySQL's InnoDB component. A high-privileged remote attacker with network access can exploit this vulnerability to cause the server to hang or crash repeatedly, resulting in a Denial of Service (DoS). Additionally, exploitation can allow unauthorized data modification, enabling the attacker to insert, update, or delete certain database records.

This vulnerability is rated with Moderate severity for Red Hat deployments because successful exploitation demands high administrative privileges, substantially constraining the blast radius. Although the issue resides in the core InnoDB storage engine and could allow an authenticated attacker to trigger an instance crash or unauthorized data modifications, untrusted or unauthenticated network users cannot exploit it directly. Furthermore, supported Red Hat Enterprise Linux releases do not include the vulnerable upstream code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.