Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-77586— MongoDB Connector for BI Unescaped Object Names in Generated SHOW CREATE Output

Quick assessment

Affected
MongoDB BI Connector
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

MongoDB BI Connector是美国MongoDB公司的一个连接商业智能工具与数据库的桥梁。 MongoDB BI Connector 2.1.0版本至2.14.31之前版本存在SQL注入漏洞，该漏洞源于在SHOW CREATE语句返回的DDL文本中，MongoDB对象名称被放入带引号的标识符时未转义标识符分隔符，导致具有写入权限的用户可构造名称提前关闭引号标识符，使额外SQL文本成为生成输出的一部分，重放时可能以会话权限执行，存在SQL注入风险。

CVSS 8.0 · High EPSS 0.42% · P35

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
MongoDB BI Connector 2.1.0< 2.14.31 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-77586

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
MongoDB Connector for BI Unescaped Object Names in Generated SHOW CREATE Output
Source: CVE Program / CVE List V5
Vulnerability Description
In MongoDB Connector for BI, MongoDB object names such as collection, field, and index names are placed into the quoted identifiers of the DDL text returned by SHOW CREATE statements without escaping the identifier delimiter. A user with permission to write to a sampled MongoDB collection can choose a name that closes the quoted identifier early, so that additional SQL text becomes part of the generated output. If an operator or automated tool later replays that generated statement against a SQL server, the additional text is executed with the privileges of that session.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Vulnerability Title
MongoDB BI Connector SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MongoDB BI Connector是美国MongoDB公司的一个连接商业智能工具与数据库的桥梁。 MongoDB BI Connector 2.1.0版本至2.14.31之前版本存在SQL注入漏洞，该漏洞源于在SHOW CREATE语句返回的DDL文本中，MongoDB对象名称被放入带引号的标识符时未转义标识符分隔符，导致具有写入权限的用户可构造名称提前关闭引号标识符，使额外SQL文本成为生成输出的一部分，重放时可能以会话权限执行，存在SQL注入风险。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
MongoDB BI Connector 2.1.0 ~ 2.14.31 -

II. Public POCs for CVE-2026-77586

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-77586

请登录查看更多情报信息。

Same Patch Batch · MongoDB · 2026-08-28 · 11 CVEs total

CVE-2026-81532 8.8 HIGH BI Connector ODBC Driver Improper Bounds Checking on Cursor Name Leading to Memory Corrupt
CVE-2026-81490 7.7 HIGH MongoDB Connector for BI Improper Error Handling During Schema Sampling May Cause Loss of
CVE-2026-81517 7.5 HIGH MongoDB Connector for BI Improper Error Handling of Log Write Failures May Cause Loss of S
CVE-2026-81518 7.5 HIGH BI Connector Optional Client Certificate Verification Allows Unauthenticated Connections
CVE-2026-81520 7.5 HIGH MongoDB Connector for BI Unbounded Authentication Negotiation Leading to Connection Exhaus
CVE-2026-81533 7.1 HIGH MongoDB BI Connector ODBC Driver Memory-Safety Issue When Parsing Oversized LIMIT Values
CVE-2026-76798 6.3 MEDIUM MongoSQL Transition Readiness Tool Improper Output Encoding in Generated HTML Reports
CVE-2026-76797 6.3 MEDIUM MongoSQL Transition Readiness Tool Improper Neutralization of Formula Elements in Generate
CVE-2026-77184 5.2 MEDIUM MongoDB Connector for BI Incomplete Escaping of Stored Metadata in Generated SHOW CREATE O
CVE-2026-76794 4.6 MEDIUM MongoDB BI Connector Transition Readiness Report Improper HTML Encoding When Processing Da

IV. Related Vulnerabilities

Same product: BI Connector
Same vendor: MongoDB
Same weakness: CWE-89

V. Comments for CVE-2026-77586

No comments yet

Leave a comment