CVE-2026-81490: CWE-476: NULL Pointer Dereference in MongoDB BI Connector
Description
CVE-2026-81490 is a high-severity vulnerability in the MongoDB BI Connector where a database user can create a specially crafted view that causes the schema-sampling routine to fail. This failure leads to the mongosqld process running without a usable schema, preventing SQL clients from obtaining query results until the problematic view is removed or excluded from sampling.
CVSS v4.0
Score 8.3high
Affected software
MongoDB
BI Connector
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability arises when a database user creates a view in a namespace that the MongoDB Connector for BI samples. If the view's evaluation reliably fails, the schema-sampling routine stops functioning because it treats the failure as transient and exhausts its retries without success. Consequently, the schema refresh routine ends without a valid schema, causing the mongosqld process to continue running but without a usable schema. This results in SQL clients being unable to retrieve query results until an operator intervenes by removing the view or excluding its namespace from sampling.
Potential Impact
The impact is a denial of service condition for SQL clients relying on the MongoDB BI Connector, as they cannot obtain query results while the schema is invalid. The mongosqld process remains operational but ineffective due to the lack of a usable schema. This requires manual remediation by an operator to restore normal functionality.
Mitigation Recommendations
No official patch or remediation is currently available. Operators must manually remove the problematic view or exclude its namespace from schema sampling to restore service. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mongodb
- Date Reserved
- 2026-08-26T20:48:19.853Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a9206c9acd9273b4963cf59
Added to database: 08/28/2026, 22:08:09 UTC
Last enriched: 09/07/2026, 15:28:05 UTC
Last updated: 10/11/2026, 06:48:19 UTC
Views: 56
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.