{"id":"CVE-2026-101722","kind":"vulnerability","aliases":["CVE-2026-101722"],"related":[],"title":"MySQL Server: connection handling flaw leaks a subset of stored data","description":"Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling).  Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).","summary":"A flaw in how MySQL Server and MySQL Cluster handle connections lets a low-privileged account reach data it should not read. The sources rate it as a confidentiality issue only, with no integrity or availability impact.","severity":"medium","cvss":4.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["database","mysql","mysql-cluster","package","self-hosted"],"not_affected_if":["no-network-access","unaffected-version"],"how_to_check":"- Run `SELECT VERSION();` in the MySQL client to see whether the server is `9.7.0` through `9.7.3` or `26.7.0` through `26.7.1`.\n- For MySQL Cluster, check the `ndb_mgmd --version` output against the same version ranges.","fix":"- Upgrade MySQL Server and MySQL Cluster to a release after the affected ranges (`9.7.3` and `26.7.1` are the last affected builds; the fixed version is unknown from the sources).\n- Restrict network access to the MySQL port until patched.","status":"open","published_at":"2026-10-20T22:18:26+00:00","first_seen_at":"2026-10-23T21:57:23+00:00","triaged_at":"2026-10-25T04:39:11+00:00","updated_at":"2026-10-25T04:39:11+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-25T04:39:11Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade MySQL Server and MySQL Cluster to a release after the affected ranges (`9.7.3` and `26.7.1` are the last affected builds; the fixed version is unknown from the sources).\n- Restrict network access to the MySQL port until patched.","reach":"network","title":"MySQL Server: connection handling flaw leaks a subset of stored data","impact":"low","summary":"A flaw in how MySQL Server and MySQL Cluster handle connections lets a low-privileged account reach data it should not read. The sources rate it as a confidentiality issue only, with no integrity or availability impact.","category":"package","nicknames":[],"who_cares":["mysql","mysql-cluster","database","self-hosted"],"confidence":0.7,"needs_auth":"yes","worst_case":"Attacker with low-privileged login reads a subset of accessible data.","analyst_note":"Confirm the fixed version and any workaround in Oracle's MySQL security advisory for CVE-2026-101722; sources give only the NVD entry.","how_to_check":"- Run `SELECT VERSION();` in the MySQL client to see whether the server is `9.7.0` through `9.7.3` or `26.7.0` through `26.7.1`.\n- For MySQL Cluster, check the `ndb_mgmd --version` output against the same version ranges.","needs_analyst":true,"not_affected_if":["unaffected-version","no-network-access"],"who_is_affected":"Teams running MySQL Server or MySQL Cluster in the affected version ranges, especially where low-privileged accounts can connect over the network via multiple protocols. Systems on unaffected versions or with MySQL reachable only from a tightly limited network can skip urgent action.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000669,"input_tokens":3537,"output_tokens":630,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-101722':14A,17A '-2026':13A,16A '/av':150C '26.7.0':90C,97C '26.7.1':91C,98C '3.1':140C,149C '4.3':143C '9.7.0':88C,94C '9.7.3':89C,95C 'access':108C,128C,137C 'account':43B 'affect':84C 'allow':102C 'attack':105C,119C 'avail':63B 'base':141C 'cluster':22B,35B,71C,93C,117C,136C 'compon':76C 'compromis':113C 'confidenti':56B,144C 'connect':3A,37B,78C 'cve':12A,15A 'cvss':139C,146C,148C 'data':11A,45B,138C 'databas':18B 'easili':99C 'exploit':100C 'flaw':5A,28B 'handl':4A,36B,79C 'host':26B 'impact':64B,145C 'integr':61B 'issu':57B 'l/i':156C 'l/pr':152C 'l/ui':153C 'leak':6A 'let':38B 'low':41B,103C 'low-privileg':40B 'multipl':110C 'mysql':1A,19B,21B,31B,34B,68C,70C,75C,86C,92C,114C,116C,133C,135C 'mysql-clust':20B 'n':158C 'n/a':157C 'n/ac':151C 'n/s':154C 'network':107C 'oracl':74C 'packag':23B 'privileg':42B,104C 'product':72C 'protocol':111C 'rate':52B 'reach':44B 'read':49B,127C 'result':124C 'score':142C 'self':25B 'self-host':24B 'server':2A,32B,69C,77C,87C,115C,134C 'sourc':51B 'store':10A 'subset':8A,131C 'success':118C 'support':80C 'u/c':155C 'unauthor':126C 'vector':147C 'version':81C 'via':109C 'vulner':65C,101C,122C","nicknames":[],"mitigations":[],"who_affected":"Teams running MySQL Server or MySQL Cluster in the affected version ranges, especially where low-privileged accounts can connect over the network via multiple protocols. Systems on unaffected versions or with MySQL reachable only from a tightly limited network can skip urgent action.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:18:26+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101722","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101722","severity":null,"published_at":"2026-10-20T22:18:26+00:00","modified_at":"2026-10-22T18:17:16+00:00","first_seen_at":"2026-10-23T21:57:23+00:00","fetched_at":"2026-10-23T22:28:59+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}