CVE-2026-60189 in MySQL Cluster
Summary
by MITRE • 07/22/2026
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 07/22/2026
This vulnerability resides within the replication component of Oracle MySQL Server and MySQL Cluster systems, specifically affecting multiple version ranges including MySQL Server 8.4.0-8.4.10 and 9.7.0-9.7.1, along with MySQL Cluster versions 8.0.0-8.0.47, 8.4.0-8.4.10, and 9.7.0-9.7.1. The flaw represents a significant availability risk that can be exploited by attackers with high privileges and network access through various protocols. The vulnerability's classification as difficult to exploit indicates that while the attack vector requires specific conditions, the potential impact is severe enough to warrant immediate attention from security teams responsible for database infrastructure protection.
The technical nature of this vulnerability manifests as a condition that can lead to complete denial of service scenarios within MySQL Server and Cluster environments. When successfully exploited, the flaw enables attackers to cause either temporary hangs or repeated crashes that effectively render the database services unavailable to legitimate users. This behavior aligns with common patterns found in heap corruption vulnerabilities or improper resource management issues that are typically classified under CWE-121 for buffer overflow conditions or CWE-476 for null pointer dereferences, though specific classification would depend on the underlying implementation details of the replication mechanism.
The operational impact of this vulnerability extends beyond simple service disruption to potentially compromise entire database clusters and their associated applications. Organizations relying on MySQL replication for data consistency and high availability may experience extended downtime during attack windows, leading to business continuity issues and potential data loss scenarios. The CVSS 3.1 base score of 4.4 indicates a medium severity threat focused primarily on availability impacts, but the complete denial of service condition can have cascading effects throughout enterprise environments that depend on database services for critical operations.
From an attacker perspective, the vulnerability requires high privileged access and network connectivity, suggesting that it may be exploited through internal network positions or by attackers who have already compromised other system components. The CVSS vector (AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H) demonstrates that while the attack complexity is high due to privilege requirements, once achieved, the attacker can cause substantial availability disruption without requiring user interaction. This characteristic places the vulnerability in the ATT&CK framework category of privilege escalation and denial of service operations, potentially enabling further exploitation through compromised database systems.
Recommended mitigations should focus on immediate patching of affected versions, implementation of network segmentation to limit access to database services, and deployment of intrusion detection systems that can monitor for unusual replication traffic patterns. Database administrators should also consider implementing additional monitoring for process hangs or repeated crashes that could indicate exploitation attempts. Access controls should be strictly enforced through proper authentication mechanisms and privilege separation to minimize the risk of attackers reaching the necessary privileged positions required to exploit this vulnerability effectively. Organizations should also review their backup and recovery procedures to ensure rapid restoration capabilities in case of successful exploitation events.