Read the docs
TI-2026-56240 Aliases CVE-2026-81518GHSA-2r33-wv3m-hvxf

BI Connector Optional Client Certificate Verification Allows Unauthenticated Connections

Priority MEDIUM 43CWE-295Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Spoofing
Confidentiality · integrity · availability
High · None · None
Fix status
Partial Red Hat: 1 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-295.

Summary

When mongosqld is configured with a client certificate authority file, the listener requests a client certificate during the TLS handshake but does not require one, so a client that presents no certificate is still accepted. In deployments that rely on client certificates as the sole means of identifying users, a remote party with network access to the listener can therefore establish a session and read the MongoDB data exposed through the connector.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00253 16th percentileScored 2026-11-07
Fix Partial BI Connector (MongoDB): 2.14.31Red Hat: 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MongoDBBI Connectorbefore 2.14.312.14.31Patch availableCNA
  • BI Connector VendorMongoDB Affected before 2.14.31 Fixed in 2.14.31 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:mongodb:bi_connector:*:*:*:*:*:*:*:*before 2.14.31VulnerableMongoDB
  • cpe:2.3:a:mongodb:bi_connector:*:*:*:*:*:*:*:* Versions before 2.14.31 Vulnerable ·MongoDB

Remediation

  • Fix · CNA BI Connector (MongoDB) Fixed in 2.14.31

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    MongoDB BI Connector 2.14.31

    6 records Highest priority Priority MEDIUM 3 MEDIUM, 3 LOW

    Other records, highest priority first

    • TI-2026-56241 MongoDB Connector for BI Unbounded Authentication Negotiation Leading to Connection ExhaustionPriority MEDIUM 44
    • TI-2026-56239 MongoDB Connector for BI Improper Error Handling of Log Write Failures May Cause Loss of SQL ServicePriority MEDIUM 44
    • TI-2026-54087 MongoDB Connector for BI Unescaped Object Names in Generated SHOW CREATE OutputPriority LOW 39
    Show all 6 records →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Logging Subsystem for Red Hat OpenShiftAffectedNo fix planned: Will not fix
Not affected: 1 product
  • Red Hat Openshift Data Foundation 4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-81518
  2. 2026-10-03 Alias added: GHSA-2r33-wv3m-hvxf
  3. 2026-10-16 Affected versions changed · Red Hat
  4. 2026-10-16 CVSS score added · Red Hat
  5. 2026-10-20 Affected versions changed · Red Hat

References

Advisory 1

  • TI-2026-56241 MongoDB Connector for BI Unbounded Authentication Negotiation Leading to Connection Exhaustion CVSS 4.0HIGH 8.7
  • TI-2026-56239 MongoDB Connector for BI Improper Error Handling of Log Write Failures May Cause Loss of SQL Service CVSS 4.0HIGH 8.7
  • TI-2026-54087 MongoDB Connector for BI Unescaped Object Names in Generated SHOW CREATE Output CVSS 4.0HIGH 8.5
  • TI-2026-56233 MongoDB Connector for BI Improper Error Handling During Schema Sampling May Cause Loss of SQL Service CVSS 4.0HIGH 8.3
  • TI-2026-52807 MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination CVSS 4.0HIGH 8.2
  • TI-2026-53906 MongoDB Connector for BI Incomplete Escaping of Stored Metadata in Generated SHOW CREATE Output CVSS 4.0MEDIUM 5.6
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences