---
id: "CVE-2026-101804"
kind: "vulnerability"
aliases: ["CVE-2026-101804"]
title: "MySQL Connector/ODBC: local partial denial of service, CVSS 2.5"
severity: "low"
cvss: 2.5
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["connector-odbc", "mysql", "odbc", "package"]
not_affected_if: ["no-local-logons", "other-connector-version"]
published_at: "2026-10-20T22:18:36+00:00"
first_seen_at: "2026-10-23T21:57:23+00:00"
updated_at: "2026-10-25T04:49:33+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101804", "first_seen_at": "2026-10-23T21:57:23+00:00"}]
---

# MySQL Connector/ODBC: local partial denial of service, CVSS 2.5

Oracle's MySQL Connector/ODBC has a flaw that lets a local user who can already log on to the host partly disrupt the connector. The sources describe only a partial denial of service with no data exposure or code execution.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `odbcinst -j` or check the installed Connector/ODBC version and compare it to `26.7.1`
- Confirm whether untrusted local users can log on to hosts running the connector

## Fix

- Move Connector/ODBC to a release newer than `26.7.1` once Oracle publishes one (unknown from sources)

## Timeline

- 2026-10-23T21:57:23+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-101804

## From the sources

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC).   The supported version that is affected is 26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors. CVSS 3.1 Base Score 2.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_