CVE-2026-101513: Low severity Oracle MySQL Cluster vulnerability
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.37. Difficult to exploit vulnerability allows physical access to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Cluster. CVSS 3.1 Base Score 3.8 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
MySQL Cluster deployments using affected supported versions from 8.0.0 through 8.0.37 are exposed if an attacker can obtain physical access and already has high privileges.
What does an attacker need to exploit the vulnerability?
Exploitation is described as difficult and requires physical access, high privileges, and no user interaction. The stated impact is limited to availability: an attacker may cause a hang or repeatedly crash MySQL Cluster.
Does this vulnerability affect confidentiality or data integrity?
No confidentiality or integrity impact is stated. The CVSS vector assigns no impact to confidentiality or integrity and a high impact to availability.