An unauthenticated local attacker who has logged onto the host running Oracle MySQL Connector/ODBC can trigger a partial denial of service, but the exploit requires user interaction from a different person. Based on the description, it is inferred that the attacker must be local to the system and must obtain cooperation from another user to complete the attack. The vulnerability does not enable privilege escalation or data disclosure, but it can disrupt application connectivity that relies on the connector.

Oracle Corporation’s MySQL Connector/ODBC version 26.7.1 is affected. No other versions are listed in the CVE data or the CPE entry. The impact is limited to machines that have this specific connector installed, such as database administration tools or applications that use ODBC to communicate with MySQL servers.

With a CVSS 3.1 base score of 2.5 the vulnerability is classified as Low severity, affecting only availability. EPSS is not available, implying a low exploitation probability. The attack requires an unauthenticated local logon and a presence of another user to provide interaction, making automated exploitation difficult. The vulnerability is not present in CISA’s KEV catalog, further reducing its immediate threat to organizations.