Buffer Overflow Vulnerability in MongoDB BI Connector ODBC Driver
CVE-2026-19001

9.5CRITICAL

Key Information:

Vendor

Mongodb
Status
Bi Connector Odbc Driver
Vendor
CVE Published:
12 August 2026

What is CVE-2026-19001?

The MongoDB BI Connector ODBC Driver is susceptible to a buffer overflow issue triggered by excessively long catalog, schema, or object names provided during metadata retrieval. This vulnerability can lead to memory corruption within the application's process, potentially resulting in abnormal termination and may allow malicious actors to execute arbitrary code under specific conditions.

Affected Version(s)

BI Connector ODBC Driver 1.0.0 < 1.4.9

References

https://github.com/mongodb/mongo-bi-connector-odbc-driver...

CVSS V4

Score:
9.5
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.