---
id: "CVE-2026-120953"
kind: "vulnerability"
aliases: ["CVE-2026-120953"]
title: "Atlas SQL JDBC Driver: sign-in flow opens attacker-chosen addresses on user's system"
severity: "medium"
cvss: 5.1
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["atlas-sql", "java", "jdbc", "package"]
not_affected_if: ["non-interactive-auth", "trusted-endpoints-only"]
published_at: "2026-11-03T19:18:00+00:00"
first_seen_at: "2026-11-03T19:44:52+00:00"
updated_at: "2026-11-03T19:45:43+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-120953", "first_seen_at": "2026-11-03T19:44:52+00:00"}]
---

# Atlas SQL JDBC Driver: sign-in flow opens attacker-chosen addresses on user's system

The Atlas SQL JDBC Driver's interactive sign-in accepts endpoint addresses from the server without checking their scheme, then hands them to the operating system's default protocol handler. A malicious endpoint can make the user's system open an address of the attacker's choosing, if the user chooses to connect to that endpoint.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check whether the application or tooling uses the Atlas SQL JDBC Driver, for example by searching dependencies for the driver name.
- Check the driver version in use against the fixed version, which the sources do not state.

## Timeline

- 2026-11-03T19:44:52+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-120953

## From the sources

A URI redirection weakness exists in the authentication component of the Atlas SQL JDBC Driver. During an interactive sign-in flow the driver accepts endpoint addresses supplied by the remote endpoint it is pointed at without validating their scheme, and passes the resulting address to the local default protocol handler. An unauthenticated remote party that controls the endpoint a user elects to connect to may cause an address of its choosing to be opened on the user's system; user interaction is required.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_