CVE-2026-81520

Name of the Vulnerable Software and Affected Versions MongoDB Connector for BI (affected versions not specified)

Description An unauthenticated network-reachable client can cause resource exhaustion by initiating a SASL-based login exchange and failing to complete it. Because the negotiation loop lacks a time bound and the client read operation has no deadline, each session indefinitely occupies a worker, a client connection slot, and associated backend database connections. Repeated exploitation of this behavior can exhaust the configured connection capacity, preventing legitimate users from establishing new sessions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the MongoDB Connector for BI to minimize the risk of exploitation.