CVE-2025-8107

Published July 24th, 2025

View on NVD ↗

CVSS v3

6.3

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

In OceanBase's Oracle tenant mode, a malicious user with specific privileges can achieve privilege escalation to SYS-level access by executing carefully crafted commands. This vulnerability only affects OceanBase tenants in Oracle mode. Tenants in MySQL mode are unaffected.

oceanbase/oceanbase

The Fastest Distributed Database for Transactional, Analytical, and AI Workloads.

GitHub

10.2K