CVE-2025-11575
Incorrect Default Permissions vulnerability in MongoDB Atlas SQL ODBC driver

Publication date: 2025-10-23

Last updated on: 2025-10-23

Assigner: [email protected]

Description
Incorrect Default Permissions vulnerability in MongoDB Atlas SQL ODBC driver on Windows allows Privilege Escalation.This issue affects MongoDB Atlas SQL ODBC driver: from 1.0.0 through 2.0.0.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Affected Vendors & Products
Vendor Product Version
mongodb mongodb_atlas_sql_odbc_driver 1.0.0
mongodb mongodb_atlas_sql_odbc_driver 2.0.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-276 During installation, installed file permissions are set to allow anyone to modify those files.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?


How can this vulnerability impact me? :


How can this vulnerability be detected on my network or system? Can you suggest some commands?


What immediate steps should I take to mitigate this vulnerability?


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart
Meta Information
CVE Publication Date:
2025-10-23
CVE Last Modified Date:
2025-10-23
Report Generation Date:
2025-11-01
AI Powered Q&A Generation:
2025-10-23
EPSS Last Evaluated Date:
2025-10-24
NVD Report Link: