PT-2026-34140 · Oracle · Mysql Shell

4Ra1N · Published 2026-04-21 · Updated 2026-06-02 · CVE-2026-34318

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MySQL Shell versions 8.0.0 through 8.0.45 MySQL Shell versions 8.4.0 through 8.4.8 MySQL Shell versions 9.0.0 through 9.6.0

Description An issue in the Shell: Core Client component allows a high-privileged attacker with network access via multiple protocols to compromise the system. This flaw may result in unauthorized access to critical data or complete access to all data accessible by the shell. Although the issue resides within the shell, successful exploitation may significantly impact additional products due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BIT-MYSQL-SHELL-2026-34318

CVE-2026-34318

OESA-2026-2256

USN-8363-1

Affected Products

Mysql Shell

References · 36

• https://ubuntu.com/security/CVE-2026-34303 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-22005 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-22009 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-35236 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-35239 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8363-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-34318 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-34318 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34271 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8363-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34276 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-22004 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34267 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-35237 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-34317 · Vendor Advisory