CVE-2026-101773

A flaw was found in the MySQL Group Replication plugin. An unauthenticated attacker located on the adjacent network can exploit this vulnerability to compromise the database service. Successful exploitation primarily allows an attacker to cause a Denial of Service (DoS) by hanging or repeatedly crashing the server, as well as perform unauthorized modifications to accessible data.

In Red Hat Enterprise Linux environments, this flaw is rated Important because an attacker on the adjacent network can trigger an unauthenticated denial of service or modify stored database contents. Exposure is naturally constrained because the MySQL Group Replication plugin is not enabled by default and requires deliberate clustering configuration. Consequently, only systems actively utilizing Group Replication within adjacent network segments are subject to exploitation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.