CVE-2026-101786

A flaw was found in the MySQL Server Optimizer component. A remote attacker with high privileges and network access via multiple protocols can exploit this vulnerability. Successful attacks can result in an unauthorized takeover of the MySQL Server or MySQL Cluster.

This vulnerability is rated with an Important impact because a remotely authenticated attacker possessing administrative privileges could completely compromise the database instance, causing total loss of system confidentiality, integrity, and availability. The prerequisite for high-level credentials limits the blast radius and prevents this flaw from meeting the Critical threshold. Red Hat Enterprise Linux is not affected by this issue, as the vulnerable query optimizer implementation is not present in the MySQL or MariaDB packages shipped across supported Red Hat offerings.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.