CVE-2026-101725

A flaw was found in the C API component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact.

Red Hat Product Security rates this vulnerability as having a Moderate severity because, although an attacker can cause a complete denial of service by crashing or hanging the database server, exploitation requires network access with existing, low-privileged user authentication. In typical Red Hat Enterprise Linux environments, database services are not publicly exposed by default and require explicitly configured user access. Consequently, the blast radius is restricted to database service availability for authenticated clients, without permitting unauthorized code execution or sensitive information leakage.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.