CVE-2026-101799

A flaw was found in the Group Replication GCS component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact.

This vulnerability is rated as Moderate rather than Important because exploitation is constrained to adjacent network access and specifically targets deployments running the optional Group Replication feature. In default Red Hat Enterprise Linux environments, MySQL does not enable or load the Group Replication plugin out of the box, significantly limiting exposure on typical systems. Successful exploitation allows an unauthenticated attacker on the same physical or logical network segment to trigger a denial of service by crashing the database service, without compromising data confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.