CVE-2026-101731
mysql: MySQL Server: Denial of service in the Server Optimizer
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 21, 2026
Updated · October 23, 2026
Description
A flaw was found in the MySQL Server Optimizer. A remote attacker with high privileges can exploit this vulnerability over network protocols to cause the server to hang or crash repeatedly. This issue results in a complete denial of service (DoS) for the database service.
Statement
This flaw is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires an attacker to already possess high administrative privileges on the target database instance. Although an authenticated administrator can trigger a denial of service by causing the database server process to terminate unexpectedly or stop responding during query optimization, the vulnerability does not compromise data confidentiality or integrity. Furthermore, standard database deployments restrict elevated account privileges to authorized administrators, significantly limiting potential exposure.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.9CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-400 · Uncontrolled Resource Consumption