This vulnerability affects Oracle MySQL Server and MySQL Cluster components related to replication. Versions impacted include MySQL Server 8.4.0 through 8.4.10 and 9.7.0 through 9.7.1, as well as MySQL Cluster 8.0.0 through 8.0.47, 8.4.0 through 8.4.10, and 9.7.0 through 9.7.1. A high privileged attacker with network access via multiple protocols can exploit this vulnerability to cause the server to hang or crash repeatedly, resulting in a complete denial of service. The vulnerability is rated medium severity with a CVSS 3.1 score of 4.4, reflecting an availability impact only. Oracle's July 2026 Critical Patch Update advisory lists this vulnerability among 1449 patches and provides patch availability information for affected products and versions.

Successful exploitation allows an attacker with high privileges and network access to cause a hang or repeated crash of MySQL Server or MySQL Cluster, resulting in a denial of service condition. There is no impact on confidentiality or integrity. The vulnerability is difficult to exploit and requires high privileges, limiting the attack surface. No known exploits in the wild have been reported.

Oracle has addressed this vulnerability in its July 2026 Critical Patch Update. Customers are strongly advised to apply the relevant patches from this update promptly. The vendor advisory does not indicate any temporary mitigations or that no action is required. Patch status is confirmed by Oracle's advisory, which includes patch availability documentation for affected MySQL Server and MySQL Cluster versions. Users should remain on actively supported versions and apply the provided security patches without delay.