A vulnerability in Oracle MySQL Server (CVE-2025-21567) affects versions 9.1.0 and earlier. It allows a low-privileged attacker with network access via multiple protocols to gain unauthorized read access to some MySQL Server data. The vulnerability has a CVSS 3.1 base score of 4.3, indicating a medium severity with confidentiality impact only. Oracle has released patches for this and many other vulnerabilities in its January 2025 Critical Patch Update advisory.