CVE-2026-101732

A flaw was found in the Optimizer component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact.

This vulnerability is rated as Moderate impact for Red Hat products because triggering the denial of service requires high-privilege authenticated access over the network. Although an attacker with administrative rights can cause the MySQL database server to crash or hang by submitting crafted queries to the server optimizer, confidentiality and integrity remain unaffected. Standard Red Hat Enterprise Linux deployments typically restrict high-privilege database roles to trusted database administrators, significantly limiting exposure. Additionally, MySQL 8.0 deployments are unaffected as the vulnerable optimizer code is not present.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.