A vulnerability in Oracle MySQL Server affects versions 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. It allows a high-privileged attacker with network access to perform unauthorized read and write operations on accessible MySQL Server data. The vulnerability has a CVSS 3.1 base score of 3.8, indicating low severity with impacts on confidentiality and integrity. Oracle has released patches as part of its January 2025 Critical Patch Update.