CVE-2026-34319: Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Shell executes to compromise MySQL Shell. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Shell. in Oracle Corporation MySQL Shell
CVE-2026-34319 is a medium severity vulnerability in Oracle MySQL Shell affecting versions 8. 0. 0 through 8. 0. 45, 8. 4. 0 through 8. 4. 8, and 9. 0.
AI Analysis
Technical Summary
This vulnerability in Oracle MySQL Shell (component: Shell: Core Client) allows a low privileged attacker with access to the infrastructure hosting MySQL Shell to cause a hang or repeated crash, resulting in a denial of service. Exploitation requires user interaction from a third party. Affected versions include 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0. The CVSS 3.1 base score is 5.0, reflecting medium severity with an impact limited to availability (no confidentiality or integrity impact). The vulnerability is tracked as CWE-204 (Exposure of Sensitive Information Through Discrepancy). Oracle's April 2026 Critical Patch Update advisory lists MySQL Shell among affected products but does not explicitly state patch availability or remediation details for this specific issue.
Potential Impact
Successful exploitation can cause MySQL Shell to hang or crash repeatedly, resulting in a complete denial of service. There is no impact on confidentiality or integrity. The attack requires low privileges and user interaction, limiting the ease of exploitation. No known active exploits have been reported.
Mitigation Recommendations
Oracle's April 2026 Critical Patch Update advisory includes MySQL Shell among affected products but does not explicitly confirm patch availability or remediation status for this vulnerability. Therefore, patch status is not yet confirmed—check the Oracle advisory at https://www.oracle.com/security-alerts/cpuapr2026.html for current remediation guidance. Customers are strongly advised to remain on actively supported versions and apply Oracle Critical Patch Updates promptly when patches become available. Until a patch is confirmed, limit access to MySQL Shell infrastructure to trusted users to reduce risk.
CVE-2026-34319: Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Shell executes to compromise MySQL Shell. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Shell. in Oracle Corporation MySQL Shell
Description
CVE-2026-34319 is a medium severity vulnerability in Oracle MySQL Shell affecting versions 8. 0. 0 through 8. 0. 45, 8. 4. 0 through 8. 4. 8, and 9. 0.
CVSS v3.1
Score 5.0medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in Oracle MySQL Shell (component: Shell: Core Client) allows a low privileged attacker with access to the infrastructure hosting MySQL Shell to cause a hang or repeated crash, resulting in a denial of service. Exploitation requires user interaction from a third party. Affected versions include 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0. The CVSS 3.1 base score is 5.0, reflecting medium severity with an impact limited to availability (no confidentiality or integrity impact). The vulnerability is tracked as CWE-204 (Exposure of Sensitive Information Through Discrepancy). Oracle's April 2026 Critical Patch Update advisory lists MySQL Shell among affected products but does not explicitly state patch availability or remediation details for this specific issue.
Potential Impact
Successful exploitation can cause MySQL Shell to hang or crash repeatedly, resulting in a complete denial of service. There is no impact on confidentiality or integrity. The attack requires low privileges and user interaction, limiting the ease of exploitation. No known active exploits have been reported.
Mitigation Recommendations
Oracle's April 2026 Critical Patch Update advisory includes MySQL Shell among affected products but does not explicitly confirm patch availability or remediation status for this vulnerability. Therefore, patch status is not yet confirmed—check the Oracle advisory at https://www.oracle.com/security-alerts/cpuapr2026.html for current remediation guidance. Customers are strongly advised to remain on actively supported versions and apply Oracle Critical Patch Updates promptly when patches become available. Until a patch is confirmed, limit access to MySQL Shell infrastructure to trusted users to reduce risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- oracle
- Date Reserved
- 2026-03-26T19:48:45.681Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://www.oracle.com/security-alerts/cpuapr2026.html","vendor":"Oracle"}]
Threat ID: 69e7e5ab19fe3cd2cdf9fa07
Added to database: 4/21/2026, 9:01:31 PM
Last enriched: 4/29/2026, 11:36:30 AM
Last updated: 6/4/2026, 8:06:41 AM
Views: 186
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.