CVE-2026-101722

A flaw was found in the MySQL connection handling component. A remote attacker with low privileges and network access can exploit this vulnerability using multiple protocols. Successful exploitation results in unauthorized read access to a subset of database data, leading to information disclosure.

Red Hat evaluates this vulnerability as having a Moderate security impact because exploitation requires existing authenticated credentials, and the blast radius is confined to partial data read access without the ability to modify records or cause a denial of service. In standard enterprise deployments, supported Red Hat Enterprise Linux releases do not ship the affected upstream branches containing this connection handling routine. Consequently, default production systems remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.