Vulnerability in MongoDB Inc Connector For Bi
CVE-2025-11535
MongoDB Connector for BI installation via MSI on Windows leaves ACLs unset on custom install directories allows Privilege Escalation.This issue affects MongoDB Connector for BI: from 2.0.0 through 2.14.24.
EPSS: 0.001 (1.7th percentile) — read the EPSS interpretation.
Affected products
- Mongodb Inc Connector For Bi — versions 2.0.0