CVE-2026-46871

Name of the Vulnerable Software and Affected Versions MySQL Shell (Shell for VS Code) version 2026.2.0+9.6.1

Description A flaw in the Shell for VS Code component of Oracle MySQL allows a low-privileged attacker with network access via multiple protocols to compromise the system. Successful exploitation can lead to unauthorized access to critical data or complete access to all data accessible by MySQL Shell.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.