Skip to content
OpenAdvisories
High · 7.8 CVE-2025-12100 EUVD-2025-35732GHSA-h6xq-62wm-2jp3

MongoDB BI Connector ODBC driver installation via MSI may leave ACLs unset on custom installation directories

Published Oct 23, 2025 · Updated Feb 26, 2026 · Assigned by mongodb

Vendor: MongoDB Product: BI Connector ODBC Driver

Description

Incorrect Default Permissions vulnerability in MongoDB BI Connector ODBC driver allows Privilege Escalation.This issue affects BI Connector ODBC driver: from 1.0.0 through 1.4.6.

Affected products

VendorProductAffectedFixed
MongoDB BI Connector ODBC driver 1.0.0 – ≤ 1.4.6 —

Advisories 1

References