CVE-2026-101802

A flaw was found in the MySQL Server Parser component. An authenticated remote attacker with low privileges can exploit this vulnerability through network access using multiple protocols. A successful attack can cause the service to hang or repeatedly crash, resulting in a Denial of Service (DoS).

This vulnerability is evaluated as Moderate impact because successful exploitation requires an attacker to possess valid database credentials with network reachability, and the consequence is strictly limited to service availability rather than arbitrary code execution or data leakage. In typical Red Hat Enterprise Linux environments, database services are isolated within protected internal network segments and restricted to authorized client applications. An authenticated user submitting crafted SQL syntax to the server parser can trigger a daemon crash or unresponsive state. Because unauthorized data disclosure or modification is prevented and low-privileged access is a prerequisite, this flaw does not present a high-severity threat.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.