This vulnerability exists in the Server: Clone Plugin component of Oracle MySQL Server and MySQL Cluster. A high privileged attacker with network access can exploit this vulnerability to cause a hang or frequent crash, resulting in a complete denial of service. The affected versions include MySQL Server 8.4.0 through 8.4.10 and 9.7.0 through 9.7.1, as well as MySQL Cluster 8.0.0 through 8.0.47, 8.4.0 through 8.4.10, and 9.7.0 through 9.7.1. The CVSS vector indicates network attack vector, high attack complexity, high privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high availability impact. Oracle's July 2026 Critical Patch Update advisory references this vulnerability but does not explicitly confirm patch availability or remediation level for these versions.

Successful exploitation allows a high privileged attacker to cause a hang or repeated crash of MySQL Server or MySQL Cluster, resulting in a denial of service. There is no impact on confidentiality or integrity. The attack requires high privileges and network access, and is difficult to exploit. No known exploits in the wild have been reported.

Oracle's July 2026 Critical Patch Update advisory includes this vulnerability among many others but does not explicitly confirm patch availability or remediation for the affected MySQL versions. Patch status is not yet confirmed — check the Oracle advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches without delay when they become available and remaining on actively supported versions.