CVE-2026-101751
Description
A flaw was found in MySQL. An authenticated, remote attacker with high privileges could cause a complete Denial of Service (DoS) by exploiting a vulnerability in the Group Replication component over the network. Successful exploitation causes the server or cluster to hang or crash repeatedly, disrupting database availability.
Statement
This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux environments because exploiting it requires high-level administrative privileges over the network and only affects system availability without compromising confidentiality or integrity. In standard Red Hat deployments, Group Replication is not enabled by default, significantly limiting the exposed attack surface unless high-availability clustering has been explicitly configured. Consequently, the issue is restricted to systems utilizing this optional replication topology and cannot be leveraged by unauthenticated or low-privileged users.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 4.9 | N/A | 4.9 |
| Attack Vector | Network | N/A | Network |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | High | N/A | High |
| User Interaction | None | N/A | None |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | None | N/A | None |
| Integrity Impact | None | N/A | None |
| Availability Impact | High | N/A | High |
Vector
Red Hat: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
cve.org: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
