CVE-2025-11575 – MongoDB Atlas SQL ODBC driver installation via MSI may leave ACLs unset on custom installation directories

CVE ID : CVE-2025-11575

Published : Oct. 23, 2025, 1:15 a.m. | 1 hour, 27 minutes ago

Description : Incorrect Default Permissions vulnerability in MongoDB Atlas SQL ODBC driver on Windows allows Privilege Escalation.This issue affects MongoDB Atlas SQL ODBC driver: from 1.0.0 through 2.0.0.

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…