CVE-2026-101785

A flaw was found in the MySQL Server JSON component. An authenticated remote attacker with low privileges can exploit this vulnerability over network protocols to modify, create, or delete accessible database records. Successful exploitation can also result in a Denial of Service (DoS) by crashing or hanging the server, as well as unauthorized data disclosure.

This vulnerability is rated as Important severity because an authenticated user with minimal access privileges can remotely trigger widespread data modification and service disruption across the database instance. In standard Red Hat Enterprise Linux environments deploying MySQL, database servers exposed to untrusted network traffic or multi-tenant user access face significant risk of service outages and database corruption. The impact is restrained from Critical because exploitation demands valid database authentication credentials rather than unauthenticated network access.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.