MongoDB Schema Builder CLI vulnerabilities (CVE)

CVE records published for MongoDB Schema Builder CLI, newest first. Follow to get an email when a new one appears.

2 results

4.8Medium

CVE-2026-19503 3 months ago

Insufficient OIDC endpoint validation could invoke unintended local protocol handlers

MongoDB Atlas SQL ODBC Driver; MongoDB Schema Builder CLI

MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document. A user induced to connect to an uncontrolled MongoDB deployment using MONGODB-OIDC au…

5.5Medium

CVE-2026-19502 3 months ago

Insufficient redaction of sensitive configuration values in diagnostic output of MongoDB SQL Schema Builder CLI

MongoDB Schema Builder CLI

MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk. Certain connection settings were written without redaction, so authentication material supplied by the operator could…