Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-12100

MongoDB BI Connector ODBC driver installation via MSI may leave ACLs unset on custom installation directories

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
mongodb

Description

Incorrect Default Permissions vulnerability in MongoDB BI Connector ODBC driver allows Privilege Escalation.This issue affects BI Connector ODBC driver: from 1.0.0 through 1.4.6.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MongoDB BI Connector ODBC driver

Default version status: unaffected

  • 1.0.0 to ≤ 1.4.6affected

References