Skip to content
OpenAdvisories

Product · MongoDB

Database Tools

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-119675

    mongorestore may bypass collection guards through a system.buckets prefix

    MongoDB Database Tools mongorestore inconsistently handles the system.buckets. prefix when validating collection names in an untrusted dump. A specially crafted collection name can bypass special-collection guards and operator namespace filters, causing a res…

    MongoDB Database Tools mongo-tools Ubuntu