This vulnerability exists in the XML component of Oracle MySQL Server and MySQL Cluster and can be easily triggered by an attacker who holds high privileged credentials and has network access. Leveraging multiple protocols, the attacker can create, delete, or modify critical data or any data exposed through the affected MySQL installations. The flaw also permits the attacker to cause the MySQL server or cluster to hang or repeatedly crash, leading to a denial‑of‑service state.

Oracle Corporation’s MySQL Server and MySQL Cluster are affected. Versions 8.4.0 through 8.4.12, 9.7.0 through 9.7.3, and 26.7.0 through 26.7.1 of both products are vulnerable.

The CVSS v3.1 base score of 6.5 indicates moderate severity with significant impact to integrity and availability. Although no EPSS data is available, the vulnerability is described as “easily exploitable” and requires the attacker to possess high‑privilege credentials over the network. The attack vector is network‑based, and the affected systems are not marked in the CISA KEV catalog. In practice, this means an adversary with sufficient credentials could compromise the database integrity and availability without special conditions.