CVE-2026-3431
Unauthorized Access via MongoDB Endpoint in SimStudio
Publication date: 2026-03-02
Last updated on: 2026-03-06
Assigner: Tenable Network Security, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| sim | sim | to 0.5.74 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-862 | The product does not perform an authorization check when an actor attempts to access a resource or perform an action. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The CVE-2026-3431 vulnerability affects Sim Studio AI versions prior to 0.5.74 and involves a flaw in the MongoDB tool endpoints.
These endpoints accept arbitrary connection parameters from callers without any authentication or host restrictions.
This allows an attacker to connect to any reachable MongoDB instance through these endpoints and perform unauthorized operations.
- Reading data
- Modifying data
- Deleting data
How can this vulnerability impact me? :
This vulnerability can have a critical impact as it allows attackers to perform unauthorized operations on any reachable MongoDB instance via the vulnerable Sim Studio endpoints.
- Attackers can read sensitive or confidential data.
- Attackers can modify data, potentially corrupting or altering important information.
- Attackers can delete data, leading to data loss.
Overall, this can lead to data breaches, loss of data integrity, and availability issues.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability involves Sim Studio versions prior to 0.5.74 where MongoDB tool endpoints accept arbitrary connection parameters without authentication or host restrictions. Detection would involve identifying if your environment is running a vulnerable version of Sim Studio and monitoring for unauthorized access attempts to these MongoDB endpoints.
Specific commands to detect exploitation attempts are not provided in the available resources.
What immediate steps should I take to mitigate this vulnerability?
The recommended immediate mitigation step is to upgrade Sim Studio to version 0.5.74 or later, as this version contains the fix for the vulnerability.