Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-10-20T21:22:59 mysql: mysql: Complete service compromise by a local privileged attacker 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CWE-400

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

A flaw was found in the Components Services component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for component-specific impact.

This vulnerability is rated Moderate because exploitation requires direct local access and high-level administrative privileges on the host system hosting MySQL, which severely limits the attack surface. While successful exploitation can result in a complete takeover of the database service, the flaw cannot be triggered remotely across the network or by unprivileged users. In standard Red Hat Enterprise Linux environments, operating system access to database servers is tightly restricted to authorized administrators, mitigating exposure to unauthorized actors. Red Hat Enterprise Linux 10 Affected mysql8.4 Red Hat Enterprise Linux 6 Not affected mysql Red Hat Enterprise Linux 9 Affected mysql Red Hat Hardened Images Not affected mariadb10.11 Red Hat Hardened Images Not affected mariadb11.8 https://www.cve.org/CVERecord?id=CVE-2026-101795 https://nvd.nist.gov/vuln/detail/CVE-2026-101795 https://www.oracle.com/security-alerts/cpuoct2026.html