CVE-2026-34319
MediumCVSS 5.0Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
An easily exploitable vulnerability exists in Oracle MySQL Shell (Shell: Core Client component) in versions 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0. A low-privileged attacker with logon to the infrastructure where MySQL Shell executes can cause a hang or frequently repeatable crash (complete DoS), requiring user interaction.
Risk Assessment
Availability of MySQL Shell can be disrupted through hangs or repeated crashes, potentially affecting operational continuity.
Recommendation
Update MySQL Shell to a version containing the fix (e.g., 8.0.46, 8.4.9, 9.6.1 or later).
Other vulnerabilities in MySQL Shell
See all- CVE-2026-34318Medium
Vulnerability in MySQL Shell (component: Shell: Core Client) affecting versions 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. A difficult-to-exploit flaw allows a high-privileged attacker with network access to gain unauthorized access to critical data or all MySQL Shell accessible data, with possible impact on additional products (scope change).
- CVE-2026-34317Medium
An easily exploitable vulnerability exists in Oracle MySQL Shell (Shell: Core Client component) in versions 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0. A low-privileged attacker with logon to the infrastructure where MySQL Shell executes can cause a hang or frequently repeatable crash (complete DoS), requiring user interaction.
- CVE-2022-21535Low
Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: General/Core Client) affects versions 8.0.28 and prior. It allows an unauthenticated attacker with access to the infrastructure where MySQL Shell runs to compromise it, requiring interaction from a person other than the attacker.
Original NVD description (English source)
Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Shell executes to compromise MySQL Shell. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Shell. CVSS 3.1 Base Score 5.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS