Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-75159

MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
mongodb

Description

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until the process restarts.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MongoDB BI Connector

Default version status: unaffected

  • 2.4.0 to < 2.14.30affected

References