CVE-2026-101801

A flaw was found in the Server Optimizer component of MySQL. A remote attacker with high privileges can exploit this vulnerability across network protocols to cause the database to hang or repeatedly crash. This issue leads to a complete Denial of Service (DoS), rendering the service unavailable to users.

In standard Red Hat Enterprise Linux environments, MySQL database instances are typically deployed behind firewalls with access restricted to trusted application tiers. This vulnerability is assessed as Moderate severity rather than Important because successful exploitation requires an attacker to already authenticate with elevated administrative privileges. While an authenticated privileged user could trigger query optimizer failures leading to service unavailability, the high credential prerequisite significantly limits exposure in production deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.