CVE-2026-71084

A flaw was found in mysql-connector-odbc. An unauthenticated attacker with local logon access to the infrastructure where MySQL Connectors executes can exploit this vulnerability. This can lead to a complete denial of service (DoS) by causing the component to crash repeatedly. Additionally, the attacker may gain unauthorized read access to a subset of data accessible by MySQL Connectors.

This Moderate severity flaw in mysql-connector-odbc allows an unauthenticated attacker with local logon access to the system to cause a complete denial of service and gain unauthorized read access to a subset of data. The local attack vector limits the immediate remote exploitability, but successful exploitation can significantly impact system availability and data confidentiality.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Since this vulnerability requires local logon access, ensure that only trusted users have interactive access to systems running mysql-connector-odbc. If the mysql-connector-odbc package is not actively used, consider removing it to eliminate the attack surface.