CVE-2026-101513 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: InnoDB)

Description

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.37. Difficult to exploit vulnerability allows physical access to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Cluster. CVSS 3.1 Base Score 3.8 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

Exploitable with physical access to the machine, with an administrator account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector

Physical

Attack complexity

High

Privileges required

High

Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Affected products and versions