EUVD-2026-67939
GHSA-435g-jwv8-462q
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable pre-auth path requires no privileges or interaction; impact is availability-only with no scope change to other systems.
Primary rating from Vendor (mongodb).
CVSS VectorVendor: mongodb
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
3DescriptionCVE.org
A network-reachable client that has not yet authenticated can hold a MongoDB Connector for BI authentication session open indefinitely by beginning a SASL-based login exchange and then declining to complete it. Because the negotiation loop had no overall time bound and the read from the client had no deadline, each such session retains a worker, a client connection slot, and its associated backend database connections until the process is restarted. Repeated use of this behavior can consume the configured connection capacity and prevent legitimate users from establishing new sessions.
AnalysisAI
Unauthenticated connection exhaustion in MongoDB Connector for BI allows any network-reachable client to hold authentication sessions open indefinitely by initiating a SASL login exchange and then withholding further data. The absence of a wall-clock timeout on the negotiation loop and no read deadline on the client socket means each such session permanently occupies a worker thread, a connection slot, and associated backend MongoDB handles until the process is restarted. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions are required beyond network reachability to the mongosqld port (default TCP 3307). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 8.7 (AV:N/AC:L/AT:N/PR:N/UI:N/VA:H) accurately captures the real-world risk profile: the attack requires no credentials, no special configuration, and no user interaction, and it is fully automatable at network speed. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult the MongoDB BI Connector release notes at https://www.mongodb.com/docs/bi-connector/current/release-notes/ to identify the patched release and upgrade as soon as possible; no specific fixed version was independently confirmed from the available data, so the authoritative version must be obtained directly from the vendor. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all MongoDB Connector for BI deployments and confirm network accessibility; enable connection logging and establish baseline connection pool metrics for abnormal activity detection. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Bi Connector
View allMongosqld in the MongoDB BI Connector requests but does not enforce client certificates during the TLS handshake when co
Log storage exhaustion in MongoDB Connector for BI (mongosqld) allows any unauthenticated network peer to crash the shar
SQL injection via identifier escaping failure in MongoDB Connector for BI allows a low-privileged MongoDB user to craft
Schema-sampling denial-of-service in MongoDB Connector for BI allows a low-privileged database user to permanently halt
Unauthenticated remote process termination in MongoDB Connector for BI (mongosqld) affects deployments explicitly config
SQL injection in MongoDB Connector for BI allows a high-privilege user to embed arbitrary SQL in generated DDL output by
MongoDB BI Connector's mongodrdl tool leaks TLS private-key passwords to standard error when the password is simultaneou
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today