CVE-2025-12100

EUVD-2025-35732
Incorrect Default Permissions vulnerability in MongoDB BI Connector ODBC driver allows Privilege Escalation.This issue affects BI Connector ODBC driver: from 1.0.0 through 1.4.6.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
mongodbCNA
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 5.2%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
mongodbbi_connector_odbc_driver
1.0.0 ≤
𝑥
≤ 1.4.6
CNA
Common Weakness Enumeration
References
https://github.com/mongodb/mongo-bi-connector-odbc-driver/releases/tag/v1.4.7