Microsoft SQL Server SQL Server 2025 Update Version 17.0.4040.1
Views
132
Your rating
Rate update installation process
Log in to rate this update.
Login
Risk factor
No ratings yet. Be the first to rate this update.
Smooth installs
0%
Minor issues
0%
Major issues
0%
AI enhanced content
Update Summary
KB5089899 updates SQL Server 2025 CU4 and addresses CVE-2026-40370, a remote code execution vulnerability. It also includes an XXE security fix in Integration Services and updates SQL Server to build 17.0.4040.1.
Update Details
Security
- CVE-2026-40370 - SQL Server Remote Code Execution Vulnerability
- Fixes an XML external entity (XXE) vulnerability in the Web Service Task that could allow arbitrary file reads or denial of service.
Known Issues
- Linked server queries that use the MSDASQL provider with a provider string (
@provstr) can fail with error 7416:Access to the remote server is denied because no login-mapping exists. - A stricter connection validation check in the Database Engine can reject some linked server configurations that use MSDASQL, even if earlier builds allowed them.
Hints
- Applies to SQL Server 2025 on Windows and Linux.
- SQL Server product version updated to 17.0.4040.1 (file version 2025.170.4040.1).
- A downloadable Excel workbook with build summaries and detailed fix lists is available from the release notes.
Product Information
Vendor: Microsoft
Product: SQL Server
Product type: Software
Variant: SQL Server 2025
Version: 17.0.4040.1
Vendor information published: May 12, 2026
Original release notes: View on vendor site
Published on updatealert.io: Sep 29, 2026