CVE-2026-101798

A flaw was found in the MySQL Server optimizer component. A remote attacker with high privileges and network access can exploit this vulnerability by submitting crafted requests across supported protocols. Successful exploitation allows the attacker to cause the database server to hang or crash repeatedly, resulting in a Denial of Service (DoS).

This vulnerability is rated as having Moderate impact for Red Hat products because triggering the condition requires an authenticated attacker with high administrative privileges. While MySQL instances exposed over the network could experience service unavailability or termination via crafted database queries processed by the query optimizer, the flaw does not permit unauthorized data access, modification, or code execution. In standard deployments, restricting administrative accounts and database access significantly limits exposure to trusted operators.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.