MongoDB BI Connector CVE-2025-12100

Exploitation requires that the BI Connector ODBC driver (versions 1.0.0 through 1.4.6) was installed on Windows to a CUSTOM installation path, where the installer set overly permissive (insecure default) directory permissions; this is the exact condition the v1.4.7 fix addresses. Limiting factors: the attacker must already have authenticated local access as a low-privileged user (AV:L, PR:L), there is no remote vector, and the AT:P requirement plus the custom-path dependency mean default installations to standard protected directories are likely not affected - significantly narrowing real-world exposure despite the high CVSS impact scores.

This is a local privilege escalation flaw (CWE-276, Incorrect Default Permissions) that the vendor CVSS 4.0 vector scores 8.8 by rating all impact metrics High (VC:H/VI:H/VA:H) plus subsequent-system impact (SC:H/SI:H/SA:H). The critical nuance is in the exploitability metrics: AV:L means it is NOT remotely exploitable, PR:L means an attacker must already be an authenticated low-privileged local user, and AT:P indicates a specific attack requirement (per the fix, a non-default custom installation path). EPSS is very low (0.17%, 5th percentile) and there is no KEV listing and no public exploit identified, which is fully consistent with a local-only, condition-dependent escalation bug that is unattractive for mass exploitation. The headline 8.8 therefore overstates practical urgency: this is a genuine post-compromise privilege-escalation primitive, not an internet-facing or wormable issue. Signals are internally consistent (local vector + low EPSS + no KEV), so there is no conflict to flag - the main caveat is that the elevated impact scoring assumes escalation to full administrative/SYSTEM control of the Windows host.

A low-privileged user already present on a Windows machine where the MongoDB BI Connector ODBC driver (<=1.4.6) was installed to a custom path with incorrectly permissive default ACLs replaces or plants a file/binary in that writable directory, which is then executed by a higher-privileged context, yielding escalation to administrator/SYSTEM. No public exploit code has been identified at time of analysis, and the attack requires prior local access plus the non-default installation condition.