CVE-2026-34317

OVERVIEW CVE-2026-34317 is a denial-of-service vulnerability in Oracle MySQL Shell that affects versions 8.0.0 through 8.0.45, 8.4.0 through 8.4.8, and 9.0.0 through 9.6.0. The flaw resides in the Shell: Core Client component and can be exploited to cause a hang or repeated crash of the MySQL Shell application. SEVERITY This is a medium-severity vulnerability with a CVSS 3.1 base score of 5.0, characterized as easily exploitable through local access. The attack requires low privileges and necessitates user interaction from someone other than the attacker. The vulnerability has no impact on confidentiality or integrity but results in high availability impact. The local attack vector with low attack complexity makes this a straightforward exploit for attackers with infrastructure access. EXPLOITATION STATUS The vulnerability shows minimal current exploitation risk. It does not appear on the Known Exploited Vulnerabilities (KEV) catalog and is classified as inactive on threat intelligence hot lists. The EPSS score of 0.00013 indicates very low probability of exploitation in the wild, positioning this below the 0.02 percentile of all CVEs. No widely available public exploit code has been identified, and community attention remains limited due to the low real-world threat profile.