CVE-2026-101776

A flaw was found in the MySQL Group Replication plugin. A remote attacker with high privileges and network access can exploit this vulnerability across multiple protocols. Successful exploitation allows the attacker to cause the service to hang or crash repeatedly, resulting in a complete Denial of Service (DoS).

This vulnerability is rated as Moderate severity because successful exploitation requires an authenticated attacker to possess high administrative privileges. In standard Red Hat Enterprise Linux environments, MySQL is not configured to run the Group Replication plugin by default, meaning typical standalone installations are unaffected unless clustering has been explicitly deployed. If enabled, a privileged user could remotely trigger a service hang or crash, resulting in a denial of service for the database instance.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.