A vulnerability exists in the MySQL Client product of Oracle MySQL, specifically in the mysqldump component. It affects multiple supported versions including 8.0.0 through 8.0.41, 8.4.0 through 8.4.4, and 9.0.0 through 9.2.0. The flaw allows a low privileged attacker with network access via multiple protocols to potentially gain unauthorized access to critical data or perform unauthorized updates, inserts, or deletes on some accessible data. The CVSS 3.1 base score is 5.9, indicating a medium severity with confidentiality and integrity impacts. Oracle has released patches for this vulnerability as part of its April 2025 Critical Patch Update.