A vulnerability in Oracle MySQL Server's Telemetry component affects versions 8.4.2 and prior and 9.0.1 and prior. It allows a high privileged attacker with network access via multiple protocols to gain unauthorized read access to some MySQL Server data. The vulnerability is difficult to exploit and has a low CVSS score of 2.2, indicating limited confidentiality impact without integrity or availability effects. Oracle has released patches for affected versions as part of their October 2024 Critical Patch Update.