CVE-2026-81490Disclosure(mongodb / bi_connector)

LOWCVSS 8.3 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch mongodb bi_connector systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A database user able to create a view in a namespace that MongoDB Connector for BI samples can cause the schema-sampling routine to stop functioning by defining a view whose evaluation reliably fails. The sampling logic classifies the resulting server message as transient and, after the configured retries are exhausted, proceeds without a valid result, ending the schema refresh routine. The mongosqld process continues running without a usable schema, so SQL clients are unable to obtain results until an operator removes the view or excludes its namespace from sampling.

mongodb CVEs Back to dashboard

2.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.mongodb.com/docs/bi-connector/current/release-notes/

Weakness type (CWE)

CWE-476

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

bi_connector

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-08-29); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

mongodb

Products

bi_connector

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets1 URL

By indicator

https://www.valtersit.com/cve/CVE-2026-81490/

Full discourse2 posts

DFIR Lab@DFIR_Lab15d
Disclosure
🚨 HIGH severity CVE-2026-81490 (CVSS 7.7) affects MongoDB Connector for BI. Malicious view creation can crash schema-sampling, rendering SQL clients unable to query until operator intervention. #CVE #Vulnerability #PatchNow #ThreatIntel #DFIR https://t.co/ENoMGZtxEt
Post summary
The tweet announces a high-severity vulnerability (CVE-2026-81490) in MongoDB Connector for BI, providing its CVSS score and impact details, but does not mention a PoC, exploit tool, active exploitation, or specific patch advisory.
0000037
143 followersView on X
Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters46d
Disclosure
CVE-2026-81490 - DoS flaw in MongoDB Connector for BI. Malicious views block schema refresh routines. CVSS 7.7. Restrict view creation privileges. #CVE #MongoDB #infosec https://www.valtersit.com/cve/CVE-2026-81490/ #CVE #CVEAlert #infosec #SysAdmin #cybersecurity #Linux #devsecops #devops #developer #sysadmin #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #ethicalhacking #cybersecurityawareness #cybersecurity #cybersecuritynews #cybersecuritytips #python #hacker #linux #kali #ubuntu #debian #ukraine #spain #ireland #unitedkingdom #canada #finland #estonia #lithuania #ireland #hungary #denmark #norway #malta #mexico #switczerland #china #france #germany #docker
Post summary
The tweet announces a DoS vulnerability in MongoDB Connector for BI, provides technical details including CVSS score, and recommends restricting view creation privileges as a mitigation.
0000052
1.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	mongodb	bi_connector	-	-	-

Explore more

Back to dashboard mongodb CVEs bi_connector vulnerabilities