CVE-2025-50068 Privilege escalation in MySQL Cluster
A high-privileged local attacker can compromise MySQL Cluster, leading to full takeover of the database system.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-50068?
CVE-2025-50068 is a medium-severity vulnerability in Oracle Mysql Cluster, published on 15 Jul 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Cluster executes to compromise MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Which versions are affected by CVE-2025-50068?
It affects 1 product.
Products include Oracle Mysql Cluster.
How do I fix CVE-2025-50068?
Apply the vendor's patch.
Is CVE-2025-50068 being exploited?
There is no known exploitation of CVE-2025-50068 in the wild and no public exploit code.
Other vulnerabilities in Oracle Mysql Cluster
- CVE-2026-60163 Privilege escalation in MySQL Cluster
- CVE-2026-60592 Denial of service in MySQL Cluster
- CVE-2026-60315 Information disclosure in MySQL Cluster
- CVE-2026-101772 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs).
- CVE-2026-70724 Auth bypass in MySQL Cluster
Sources
Also known as GHSA-9jhc-wxq7-43q6.