MySQL Cluster Vulnerability in Oracle MySQL Exposes Systems to Compromise
CVE-2025-50068

6.7MEDIUM

Key Information:

Vendor

Oracle
Status
Mysql Cluster
Vendor
CVE Published:
15 July 2025

What is CVE-2025-50068?

A vulnerability exists in the MySQL Cluster component of Oracle MySQL, affecting supported versions from 8.0.0 to 8.0.42, and 8.4.0 to 8.4.5, as well as 9.0.0 to 9.3.0. This flaw can be exploited by an attacker with high privileges who has logged into the infrastructure where MySQL Cluster is deployed, potentially allowing them to compromise the entire MySQL Cluster. If successfully manipulated, the vulnerability could lead to unauthorized control and full takeover of the MySQL Cluster, exposing sensitive data and affecting the overall integrity and availability of the database services.

Affected Version(s)

MySQL Cluster 8.0.0 <= 8.0.42

MySQL Cluster 8.4.0 <= 8.4.5

MySQL Cluster 9.0.0 <= 9.3.0

References

https://www.oracle.com/security-alerts/cpujul2025.html
vendor-advisory

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.