CVE-2026-101789

A flaw was found in the MySQL Optimizer component. An authenticated remote attacker with low privileges can exploit this vulnerability over the network to cause a Denial of Service (DoS). Successful exploitation allows the attacker to hang or repeatedly crash the server, disrupting database operations for legitimate users.

This vulnerability is rated as Moderate because exploitation requires valid database credentials to reach the query optimization engine, and the resulting impact is limited to an availability failure without compromising confidentiality or data integrity. An authenticated user can trigger a server lockup or abnormal termination by executing specific complex queries. In typical Red Hat Enterprise Linux environments, database access is restricted to authenticated client applications, mitigating unauthenticated network exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.