MySQL Shell for VS Code Unauthorized Data Access

Compliance Impact

This vulnerability allows a low privileged attacker with network access to gain unauthorized access to critical data or all data accessible by MySQL Shell. Such unauthorized access to sensitive or critical data can potentially lead to non-compliance with data protection regulations and standards such as GDPR and HIPAA, which require strict controls over access to personal and sensitive information.

Therefore, organizations using the affected MySQL Shell version may face increased risk of data breaches that could violate these regulations, resulting in legal and financial consequences.

Useful 0 Not Useful 0

Executive Summary

This vulnerability exists in the MySQL Shell product of Oracle MySQL, specifically in the Shell for VS Code component. It affects the supported version 2026.2.0+9.6.1 and allows a low privileged attacker with network access via multiple protocols to exploit it easily.

Successful exploitation can lead to unauthorized access to critical data or complete access to all data accessible through MySQL Shell.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can allow an attacker with low privileges and network access to gain unauthorized access to critical data within MySQL Shell.

This means sensitive or important data could be exposed or compromised without proper authorization.

Useful 0 Not Useful 0