Skip to content
OpenAdvisories

Product · MongoDB

Compass

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-113870

    Improper Encoding of Server-Supplied JavaScript Values in MongoDB Compass BSON Parsing

    MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editable source. When a user connects to a MongoDB deployment containing a specially crafted view and opens that view for editing, the values can …

    MongoDB Compass
  • High 7.1
    CVE-2026-96750

    Shell script injection via server-supplied database name in Open MongoDB shell

    MongoDB Compass can interpolate a database name without escaping into the initial input of its embedded MongoDB shell when a user opens the shell from that database's view. A user with privileges to create databases on a server that a Compass user connects to…

    MongoDB Compass