Vulnerability in Oracle MySQL Connectors: Connector/Python Exposed

CVE-2025-21548

Summary

This vulnerability in Oracle MySQL Connectors (specifically, Connector/Python) poses significant risks for users of version 9.1.0 and earlier. A high-privileged attacker with network access can exploit the vulnerability through various protocols, necessitating human interaction from a victim other than the attacker. Successful exploitation may allow unauthorized creation, deletion, or modification of critical data, as well as unauthorized read access to sensitive information. Additionally, this vulnerability could result in a denial-of-service condition, leading to system hangs or crashes of the MySQL Connectors.

References