Impact
A database user with the ability to create a view can define a view that reliably fails during the BI Connector’s schema‐sampling routine. The Connector interprets the resulting error as transient, exhausts its retry attempts, and abandons the schema refresh, leaving the internal schema state invalid. When this occurs the mongosqld process continues running but cannot provide correct query results, effectively denying service to SQL clients until the offending view is removed or the namespace excluded from sampling.
Affected Systems
Any installation of MongoDB Connector for BI that includes the schema‐sampling functionality is affected. The issue is present regardless of specific Connector version, provided the sampling routine remains active and view‑creation permissions are not tightly controlled.
Risk and Exploitability
The CVSS score of 8.3 indicates high severity. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires a privileged database account that can create views within a namespace sampled by the Connector, a privilege often assigned to trusted users. In environments where such permissions are broadly granted, the threat is likely exploitable, enabling attackers to cause prolonged denial of service for connected SQL clients.
OpenCVE Enrichment