---
id: "CVE-2026-101779"
kind: "vulnerability"
aliases: ["CVE-2026-101779"]
title: "MySQL Server Telemetry flaw lets high-privileged users cause partial denial of service"
severity: "low"
cvss: 2.7
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["databases", "mysql", "package", "self-hosted"]
not_affected_if: ["managed-hosting", "version-outside-range"]
published_at: "2026-10-20T22:18:33+00:00"
first_seen_at: "2026-10-23T21:57:23+00:00"
updated_at: "2026-10-25T04:48:04+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101779", "first_seen_at": "2026-10-23T21:57:23+00:00"}]
---

# MySQL Server Telemetry flaw lets high-privileged users cause partial denial of service

A flaw in the Telemetry component of MySQL Server and MySQL Cluster lets a highly privileged network user cause a partial denial of service. Oracle rates it low, with a CVSS 3.1 score of 2.7 for availability impact only.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `SELECT VERSION();` in MySQL to see whether the server is in an affected range: 8.4.0 to 8.4.12, 9.7.0 to 9.7.3, or 26.7.0 to 26.7.1.
- Check whether the MySQL Cluster build is in the same affected ranges.

## Fix

- Move MySQL Server to a release outside the affected ranges (fixed version unknown from sources).
- Move MySQL Cluster to a release outside the affected ranges (fixed version unknown from sources).

## Timeline

- 2026-10-23T21:57:23+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-101779

## From the sources

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Telemetry).  Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.4.0-8.4.12, 9.7.0-9.7.3 and  26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 2.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_