# CVE-2026-34317: Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.

Source: https://junglewise.ai/threats/cve-2026-34317-vulnerability-in-the-mysql-shell-product-of-oracle-mysql  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-21  
License: CC BY 4.0 with a link back

CVE-2026-34317 · Severity: medium · CVSS 5 · Published 2026-04-21

Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client).  Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and  9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Shell executes to compromise MySQL Shell.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Shell. CVSS 3.1 Base Score 5.0 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H).

Technologies: [Oracle Mysql](https://junglewise.ai/threats/technologies/mysql). Vendors: [Oracle](https://junglewise.ai/threats/vendors/oracle).

## Quick answers

**Is CVE-2026-34317 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-34317 being exploited in the wild.

**How severe is CVE-2026-34317?** Medium severity, with a CVSS score of 5, published 21 April 2026.

**Which products and versions are affected?** Oracle Mysql. The advisory does not name versions.

**Is there a fix for CVE-2026-34317?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-34317?** Check whether you run Oracle Mysql. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Oracle Mysql

## Related threats

- [Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.](https://junglewise.ai/threats/cve-2026-34319-vulnerability-in-the-mysql-shell-product-of-oracle-mysql)
- [Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.0-8.](https://junglewise.ai/threats/cve-2026-34318-vulnerability-in-the-mysql-shell-product-of-oracle-mysql)
- [Oracle MySQL Server information disclosure in Encryption subcomponent](https://junglewise.ai/threats/cve-2017-3320-oracle-mysql-server-information-disclosure-in-encryption)
- [Oracle MySQL Server information disclosure in X Plugin](https://junglewise.ai/threats/cve-2017-3319-oracle-mysql-server-information-disclosure-in-x-plugin)
- [Oracle MySQL Server denial of service in Replication component](https://junglewise.ai/threats/cve-2017-3256-oracle-mysql-server-denial-of-service-in-replication-component)