Skip to content
OpenAdvisories

Product · MongoDB

Schema Builder CLI

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-19503

    Insufficient OIDC endpoint validation could invoke unintended local protocol handlers

    MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document. A user induced to connect to an uncontrolled MongoDB deployment using MONGODB-OIDC au…

    MongoDB Atlas SQL ODBC Driver Schema Builder CLI mongodb Ubuntu
  • Medium 5.5
    CVE-2026-19502

    Insufficient redaction of sensitive configuration values in diagnostic output of MongoDB SQL Schema Builder CLI

    MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk. Certain connection settings were written without redaction, so authentication material supplied by the operator could…

    MongoDB Schema Builder CLI mongodb Ubuntu