CVE-2026-101806

A flaw was found in mysql-connector-odbc. Under specific conditions, a low-privileged attacker with network access can exploit this vulnerability to compromise database connections. Successful exploitation allows an attacker to gain unauthorized read, modification, or deletion access to sensitive data handled by the connector.

This vulnerability is rated as Moderate because successful exploitation requires an attacker to possess existing authenticated privileges under complex execution conditions, and it does not affect availability or compromise the host operating system. In Red Hat enterprise deployments, the mysql-connector-odbc package provides a client-side database driver rather than a persistent network daemon. Consequently, potential impact is limited to applications actively utilizing ODBC connections to interact with MySQL instances where an attacker already holds authorized access.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.