CVE-2025-11535 — MongoDB Connector for BI installation MSI leave ACLs unset on custom installation directories

CVE-2025-11535

MongoDB Connector for BI installation MSI leave ACLs unset on custom installation directories PUBLISHED

Description (CNA)

MongoDB Connector for BI installation via MSI on Windows leaves ACLs unset on custom install directories allows Privilege Escalation.This issue affects MongoDB Connector for BI: from 2.0.0 through 2.14.24.

Affected (CNA)

Vendor / product	Versions
MongoDB Inc / MongoDB Connector for BI	affected 2.0.0 through 2.14.24

CWE

CWE-276

References

https://www.mongodb.com/docs/bi-connector/current/release-notes/#bi-2.14.25

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.