A vulnerability in Oracle MySQL Server affects versions 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. It allows a low-privileged attacker with network access via multiple protocols to gain unauthorized read and write access to some MySQL Server accessible data. The vulnerability has a CVSS 3.1 base score of 5.4, indicating medium severity with impacts on confidentiality and integrity but no impact on availability. Oracle has released patches as part of their January 2025 Critical Patch Update.