CVE-2026-101677

A flaw was found in MySQL Connector/J. An unauthenticated remote attacker could exploit this vulnerability by convincing a user to interact with a malicious service across the network. A successful attack can result in unauthorized modification, insertion, or deletion of accessible data.

This vulnerability is rated as having Moderate impact because successful exploitation requires user interaction and is limited to unauthorized data alteration without compromising confidentiality or system availability. In Red Hat environments, applications embed this JDBC driver within controlled application tiers to communicate with database instances. Because the flaw cannot be leveraged for arbitrary code execution and only impacts a subset of accessible connector records, the risk to typical enterprise deployments is contained.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.