This vulnerability affects Oracle MySQL Server and MySQL Cluster components related to DDL operations. Versions impacted include MySQL Server 8.4.0 through 8.4.10 and 9.7.0 through 9.7.1, as well as MySQL Cluster 8.0.0 through 8.0.47, 8.4.0 through 8.4.10, and 9.7.0 through 9.7.1. A high privileged attacker with network access via multiple protocols can exploit this vulnerability to cause a hang or frequent crashes, resulting in a complete denial of service. The vulnerability is rated medium severity with a CVSS 3.1 score of 4.4 (AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H). No confidentiality or integrity impacts are noted. Oracle's July 2026 Critical Patch Update advisory lists this vulnerability among 1449 security patches, indicating that a fix is available through Oracle's patching process.

Successful exploitation allows a high privileged attacker with network access to cause a hang or repeated crash of MySQL Server or MySQL Cluster, resulting in a complete denial of service. There is no impact on confidentiality or integrity. The vulnerability requires high attacker privileges and is difficult to exploit. No known exploits in the wild have been reported.

Oracle has released patches addressing this vulnerability as part of the July 2026 Critical Patch Update. Users should apply the relevant patches promptly to remediate this issue. The vendor advisory strongly recommends staying on actively supported versions and applying security patches without delay. Patch status is confirmed by the vendor advisory; therefore, remediation is available through official Oracle patches.