Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

MongoDB Compass — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in MongoDB Compass, with AI-generated Chinese analysis, references, and POCs.

Vendor: MongoDB Inc.

CVE IDTitleCVSSSeverityPublished
CVE-2026-14881 Compass connection import allows to override OIDC browser open command (usually set through settings), allowing for arbitrary shell commands execution when connecting to cluster using OIDC auth flow CWE-78 7.8 High2026-07-22
CVE-2025-1755 MongoDB Compass may be susceptible to local privilege escalation in Windows CWE-426 7.5 High2025-02-27
CVE-2024-6376 ejson shell parser in MongoDB Compass maybe bypassed CWE-20 7.0 High2024-07-01
CVE-2024-3371 Insufficient validation of external input in Compass may enable MITM attacks CWE-360 7.1 High2024-04-24
CVE-2021-20334 Local privilege escalation in MongoDB Compass for Windows CWE-269 4.8 Medium2021-04-06

All 5 known CVE vulnerabilities affecting MongoDB Compass with full Chinese analysis, references, and POCs where available.