CVE-2026-81533Patch(mongodb / bi_connector_odbc_driver)

LOWCVSS 6.0 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch mongodb bi_connector_odbc_driver systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An application using the MongoDB BI Connector ODBC Driver may encounter a memory-safety issue when a submitted SQL statement contains an unusually long run of digits following a LIMIT clause. The issue occurs only on connections where the driver's optional prefetch setting is enabled, and stems from the driver copying the digit sequence into a fixed-size internal buffer without checking its length. A user able to influence the numeric portion of a LIMIT clause could cause the hosting application process to terminate unexpectedly or corrupt adjacent memory in that process.

mongodb CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://github.com/mongodb/mongo-bi-connector-odbc-driver/releases

Weakness type (CWE)

CWE-121

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

bi_connector_odbc_driver

Threat summary

Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
Peaked 1d ago at 1 mentions (2026-08-29); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

mongodb

Products

bi_connector_odbc_driver

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Patch

150.0%

Disclosure

150.0%

Referenced assets1 URL

By indicator

https://www.valtersit.com/cve/CVE-2026-81533

Classification over time

Date	Total	Labels

2026-08-29	1	Patch1
2026-09-12	1	Disclosure1

Full discourse2 posts

DFIR Lab@DFIR_Lab33d
Disclosure
🚨 HIGH: CVE-2026-81533 (CVSS 7.1) - MongoDB BI Connector ODBC Driver memory-safety flaw. Buffer overflow via malicious LIMIT clause can crash apps or corrupt memory. Affects connections with prefetch enabled. #CVE #PatchNow #ThreatIntel https://t.co/euwARiY5ZG
Post summary
The tweet announces CVE-2026-81533, a memory-safety flaw in the MongoDB BI Connector ODBC Driver that causes buffer overflow via malicious LIMIT clauses, but it does not provide a PoC, exploit code, patch, or evidence of active exploitation.
0000046
133 followersView on X
Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters46d
Patch
CVE-2026-81533 - Memory safety flaw in MongoDB BI Connector ODBC Driver. Buffer overflow via long LIMIT clauses. CVSS 7.1. Disable prefetch now. #CVE #MongoDB #infosec https://www.valtersit.com/cve/CVE-2026-81533 #CVE #CVEAlert #infosec #SysAdmin #cybersecurity #Linux #devsecops #devops #developer #sysadmin #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #ethicalhacking #cybersecurityawareness #cybersecurity #cybersecuritynews #cybersecuritytips #python #hacker #linux #kali #ubuntu #debian #ukraine #spain #ireland #unitedkingdom #canada #finland #estonia #lithuania #ireland #hungary #denmark #norway #malta #mexico #switczerland #china #france #germany #docker
Post summary
CVE-2026-81533 is a buffer overflow bug in the MongoDB BI Connector ODBC Driver, with a recommended mitigation of disabling prefetch.
0000062
1.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	mongodb	bi_connector_odbc_driver	-	-	-

Explore more

Back to dashboard mongodb CVEs bi_connector_odbc_driver vulnerabilities