CVE-2026-101733
mysql: mysql: Denial of Service via JSON component
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 21, 2026
Updated · October 23, 2026
Description
A flaw was found in the MySQL JSON component. An authenticated remote attacker with low privileges can exploit this vulnerability over the network using multiple protocols. A successful attack can cause the server to hang or repeatedly crash, resulting in a complete Denial of Service (DoS).
Statement
This vulnerability is rated as having a Moderate impact for Red Hat products because, although an attacker can cause a denial of service through an unexpected hang or crash, exploitation requires valid database authentication with low-level privileges. The issue is confined to availability impacts within the JSON handling subsystem, with no impact on data confidentiality or integrity. In standard Red Hat Enterprise Linux deployments where database credentials and network access are strictly controlled, the likelihood of exploitation is significantly reduced.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-20 · Improper Input Validation