CVE-2025-12100: MongoDB BI Connector ODBC driver installation via MSI may leave ACLs unset on custom installation directories
Published Oct 23, 2025
·Updated
Incorrect Default Permissions vulnerability in MongoDB BI Connector ODBC driver allows Privilege Escalation.This issue affects BI Connector ODBC driver: from 1.0.0 through 1.4.6.
Affected Software
1 affected component
MongoDB BI Connector ODBC driver>=1.0.0<=1.4.6
Event History
Oct 23, 2025
CVE Published
via MITRE·09:02 PM
Data Sourced
via MITRE·09:02 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-12100?
CVE-2025-12100 is considered a high severity vulnerability due to its potential for privilege escalation.
2
How do I fix CVE-2025-12100?
To mitigate CVE-2025-12100, upgrade the MongoDB BI Connector ODBC driver to version 1.4.7 or later.
3
What versions of MongoDB BI Connector ODBC driver are affected by CVE-2025-12100?
CVE-2025-12100 affects MongoDB BI Connector ODBC driver versions from 1.0.0 through 1.4.6.
4
What type of vulnerability is CVE-2025-12100?
CVE-2025-12100 is classified as an Incorrect Default Permissions vulnerability.
5
Can CVE-2025-12100 lead to unauthorized access?
Yes, CVE-2025-12100 can allow unauthorized users to escalate their privileges within the system.