Skip to content
OpenAdvisories
Medium · 5.8 CVE-2026-34318 EUVD-2026-24418

Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.…

Published Apr 21, 2026 · Updated Apr 22, 2026 · Assigned by oracle

Description

Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shell. While the vulnerability is in MySQL Shell, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Shell accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N).

Affected products

VendorProductAffectedFixed
Oracle MySQL Shell 8.0.0 – ≤ 8.0.45, 8.4.0 – ≤ 8.4.8, 9.0.0 – ≤ 9.6.0 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS mysql-8.4 8.4.9-0ubuntu0.26.04.1 USN-8363-1
Ubuntu 25.10 mysql-8.4 8.4.9-0ubuntu0.25.10.1 USN-8363-1
Ubuntu 24.04 LTS mysql-8.0 8.0.46-0ubuntu0.24.04.2 USN-8363-1
Ubuntu 22.04 LTS mysql-8.0 8.0.46-0ubuntu0.22.04.2 USN-8363-1
Ubuntu 20.04 LTS mariadb-10.3 No fix yet —
Show 5 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS percona-server-5.6 +1 No fix yet —
Ubuntu 14.04 LTS mysql-5.5 No fix yet —
Ubuntu Pro 20.04 LTS mysql-8.0 8.0.46-0ubuntu0.20.04.1+esm2 USN-8363-2
Ubuntu Pro 18.04 LTS mysql-5.7 No fix yet —
Ubuntu Pro 16.04 LTS mysql-5.7 No fix yet —

Advisories 3

References