MongoDB Atlas SQL JDBC driver loads a planted native library from a shared temp directory

Java applications that load the MongoDB Atlas SQL JDBC driver (org.mongodb:mongodb-jdbc) on a host where other, untrusted local users have accounts; the attack needs a local account and a file placed in the shared temp location the driver uses for its native library. MongoDB says exploitation was unlikely because the library is loaded once at driver load and the temp location is not fixed and hard to predict. Single-user hosts, containers without other users, and apps not using this driver can skip it. The first affected version is not stated by the vendor.