CVE-2025-21581

Summary

CVE-2025-21581 is a serious vulnerability affecting MySQL Server versions 8.0.0-8.0.41, 8.4.0-8.4.4, and 9.0.0-9.2.0. This issue, located in the Optimizer component, allows a high-privileged attacker with network access to cause a hang or frequently repeatable crash of MySQL Server, leading to a Denial of Service (DoS) condition. The vulnerability is easily exploitable and has a base score of 4.9 in CVSS 3.1. Attackers can exploit this vulnerability through multiple protocols, making it a significant threat for organizations running these affected MySQL Server versions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.