Skip to content
OpenAdvisories

Product · MongoDB

Compass

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-115929

    MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs

    MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes El…

    MongoDB Compass
  • Medium 4.3
    CVE-2026-9101

    Prototype pollution in csv parsing

    Prototype pollution in csv parsing logic during import can lead to untrusted file paths (but not arguments) entering shell.openExternal after specific user behavior leading to "1-click" command execution.

    MongoDB Compass