CVE-2026-75159

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until the process restarts.

Score

CVSS 4.0 8.2 High

Status

Analyzed - cna@mongodb.com

Published

2026-08-27

Last modified

2026-08-27

Weaknesses

CWE-415

Affected products

• Bi Connector (Mongodb)

References

• https://www.mongodb.com/docs/bi-connector/current/release-notes/#mongodb-connector-for-bi-2.14.30