This vulnerability in Oracle MySQL Shell (component: Shell: Core Client) affects multiple supported versions and allows a low privileged attacker with access to the infrastructure to cause a hang or repeated crash of MySQL Shell, resulting in a denial of service. Exploitation requires user interaction from a third party. The CVSS 3.1 base score is 5.0, reflecting a medium severity with impact limited to availability. The vulnerability is documented in Oracle's April 2026 Critical Patch Update advisory, which addresses numerous security issues across Oracle products including MySQL Shell. The advisory strongly recommends applying the Critical Patch Update but does not explicitly state the patch status for this specific vulnerability.

Successful exploitation can cause a hang or frequent crash of MySQL Shell, resulting in a complete denial of service. There is no impact on confidentiality or integrity. The attack requires a low privileged attacker with logon access and human interaction from another user, limiting the ease of exploitation. No known active exploits have been reported.

Oracle's April 2026 Critical Patch Update advisory includes security patches for MySQL Shell and strongly recommends applying these updates promptly. Although the advisory does not explicitly confirm a patch for CVE-2026-34319, it is advisable to apply the April 2026 Critical Patch Update to address this and other vulnerabilities. Organizations should ensure they remain on actively supported versions and apply Oracle's Critical Patch Updates without delay. Patch status is not yet explicitly confirmed for this vulnerability; check Oracle's advisory for the latest remediation guidance.