CVE-2025-11535

Published: Oct 8, 2025

Modified: Feb 26, 2026

PUBLISHED

Description

MongoDB Connector for BI installation via MSI on Windows leaves ACLs unset on custom install directories allows Privilege Escalation.This issue affects MongoDB Connector for BI: from 2.0.0 through 2.14.24.

Vendor	Product	Versions
MongoDB Inc	MongoDB Connector for BI	affected `2.0.0 - <= 2.14.24`

Weaknesses (CWE)

CWE-276

References

https://www.mongodb.com/docs/bi-connector/current/release-notes/#bi-2.14.25

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2025-11535

Description

Affected Products

Weaknesses (CWE)

References