Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-11535

MongoDB Connector for BI installation MSI leave ACLs unset on custom installation directories

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
mongodb

Description

MongoDB Connector for BI installation via MSI on Windows leaves ACLs unset on custom install directories allows Privilege Escalation.This issue affects MongoDB Connector for BI: from 2.0.0 through 2.14.24.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MongoDB Inc MongoDB Connector for BI

Default version status: unaffected

  • 2.0.0 to ≤ 2.14.24affected

References