Quick answers
- Is CVE-2026-81490 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-81490 being exploited in the wild.
- How severe is CVE-2026-81490?
- High severity, with a CVSS score of 7.7, published 28 August 2026.
- Which products and versions are affected?
- MongoDB Connector for BI.
- Is there a fix for CVE-2026-81490?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-81490 attacked?
- It is attacked over the network, in a hosted service.
- Am I affected by CVE-2026-81490?
- Check whether you run MongoDB Connector for BI. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The vulnerability exists in the schema-sampling routine of mongosqld, which attempts to introspect MongoDB collections to build a queryable schema. An authenticated database user can create a view with an expression that reliably fails evaluation. The sampling logic misclassifies this failure as a transient error and exhausts its retry mechanism, eventually proceeding without valid schema data. The mongosqld process continues running but with a corrupted or missing schema, rendering SQL queries impossible. The attack requires database write permissions to create views, and the only recovery is manual intervention to remove the view or exclude its namespace from sampling.
Affected products
- MongoDB Connector for BI
Timeline
- 2026-08-28: disclosed