CVE-2026-101780

A flaw was found in the MySQL Server X Plugin component. An authenticated remote attacker with low privileges and network access can exploit this vulnerability through network protocol requests. Successful exploitation allows the attacker to cause the database server to hang or repeatedly crash, leading to a complete Denial of Service (DoS).

This vulnerability is rated as Moderate impact because, although successful exploitation results in complete service unavailability via a daemon crash or hang, an attacker must possess valid credentials to connect to the X Plugin. The issue does not compromise data confidentiality or system integrity, limiting the blast radius exclusively to availability. Furthermore, exposure is constrained to environments where the X Plugin interface is enabled and accessible to authenticated database users.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.