{"id":"CVE-2026-120953","kind":"vulnerability","aliases":["CVE-2026-120953"],"related":[],"title":"Atlas SQL JDBC Driver: sign-in flow opens attacker-chosen addresses on user's system","description":"A URI redirection weakness exists in the authentication component of the Atlas SQL JDBC Driver. During an interactive sign-in flow the driver accepts endpoint addresses supplied by the remote endpoint it is pointed at without validating their scheme, and passes the resulting address to the local default protocol handler. An unauthenticated remote party that controls the endpoint a user elects to connect to may cause an address of its choosing to be opened on the user's system; user interaction is required.","summary":"The Atlas SQL JDBC Driver's interactive sign-in accepts endpoint addresses from the server without checking their scheme, then hands them to the operating system's default protocol handler. A malicious endpoint can make the user's system open an address of the attacker's choosing, if the user chooses to connect to that endpoint.","severity":"medium","cvss":5.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["atlas-sql","java","jdbc","package"],"not_affected_if":["non-interactive-auth","trusted-endpoints-only"],"how_to_check":"- Check whether the application or tooling uses the Atlas SQL JDBC Driver, for example by searching dependencies for the driver name.\n- Check the driver version in use against the fixed version, which the sources do not state.","fix":null,"status":"open","published_at":"2026-11-03T19:18:00+00:00","first_seen_at":"2026-11-03T19:44:52+00:00","triaged_at":"2026-11-03T19:45:43+00:00","updated_at":"2026-11-03T19:45:43+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-11-03T19:45:43Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Atlas SQL JDBC Driver: sign-in flow opens attacker-chosen addresses on user's system","impact":"low","summary":"The Atlas SQL JDBC Driver's interactive sign-in accepts endpoint addresses from the server without checking their scheme, then hands them to the operating system's default protocol handler. A malicious endpoint can make the user's system open an address of the attacker's choosing, if the user chooses to connect to that endpoint.","audience":"developers","category":"package","nicknames":[],"who_cares":["jdbc","java","atlas-sql"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker opens an arbitrary address on the user's machine","analyst_note":"Find the affected version range and fixed version from the NVD entry or the vendor advisory, and confirm whether the sign-in flow is the only exposure.","how_to_check":"- Check whether the application or tooling uses the Atlas SQL JDBC Driver, for example by searching dependencies for the driver name.\n- Check the driver version in use against the fixed version, which the sources do not state.","plain_action":"","needs_analyst":true,"not_affected_if":["non-interactive-auth","trusted-endpoints-only"],"who_is_affected":"Teams whose applications or tools use the Atlas SQL JDBC Driver with interactive sign-in, where a user connects to an endpoint they do not fully trust. The sources do not say which driver versions are affected, and do not describe a server-side exposure. Teams using only non-interactive authentication are likely not exposed, but the sources do not confirm this.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000723,"input_tokens":4175,"output_tokens":611,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-120953':20A,23A '-2026':19A,22A 'accept':40B,111C 'address':13A,42B,72B,113C,131C,155C 'atlas':1A,25B,31B,98C 'atlas-sql':24B 'attack':11A,75B 'attacker-chosen':10A 'authent':94C 'caus':153C 'check':47B 'choos':77B,81B,158C 'chosen':12A 'compon':95C 'connect':83B,150C 'control':143C 'cve':18A,21A 'default':58B,135C 'driver':4A,34B,101C,110C 'elect':148C 'endpoint':41B,63B,86B,112C,118C,145C 'exist':91C 'flow':8A,108C 'hand':51B 'handler':60B,137C 'interact':36B,104C,168C 'java':27B 'jdbc':3A,28B,33B,100C 'local':134C 'make':65B 'malici':62B 'may':152C 'open':9A,70B,161C 'oper':55B 'packag':29B 'parti':141C 'pass':128C 'point':121C 'protocol':59B,136C 'redirect':89C 'remot':117C,140C 'requir':170C 'result':130C 'scheme':49B,126C 'server':45B 'sign':6A,38B,106C 'sign-in':5A,37B,105C 'sql':2A,26B,32B,99C 'suppli':114C 'system':17A,56B,69B,166C 'unauthent':139C 'uri':88C 'user':15A,67B,80B,147C,164C,167C 'valid':124C 'weak':90C 'without':46B,123C","nicknames":[],"mitigations":[],"who_affected":"Teams whose applications or tools use the Atlas SQL JDBC Driver with interactive sign-in, where a user connects to an endpoint they do not fully trust. The sources do not say which driver versions are affected, and do not describe a server-side exposure. Teams using only non-interactive authentication are likely not exposed, but the sources do not confirm this.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["atlassql","java","jdbc","medium","package"],"campaign_type":null,"first_public_at":"2026-11-03T19:18:00+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@mongodb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-120953","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-120953","severity":null,"published_at":"2026-11-03T19:18:00+00:00","modified_at":"2026-11-03T19:18:00+00:00","first_seen_at":"2026-11-03T19:44:52+00:00","fetched_at":"2026-11-03T19:44:52+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}