Vulnerabilities (CVE)

Filtered by vendor Mongodb Subscribe
Filtered by product Mongosh
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-1756 2 Mongodb, Redhat 13 Mongosh, Codeready Linux Builder Eus, Codeready Linux Builder For Arm64 Eus and 10 more 2025-04-09 N/A 7.5 HIGH
mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\node_modules\. This issue affects mongosh prior to 2.3.0