CVE-2026-75159 — MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination

CVE-2026-75159

MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination PUBLISHED

Description (CNA)

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until the process restarts.

Affected (CNA)

Vendor / product	Versions
MongoDB / BI Connector	affected 2.4.0 before 2.14.30

CWE

CWE-415

References

https://www.mongodb.com/docs/bi-connector/current/release-notes/#mongodb-connector-for-bi-2.14.30

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.