Skip to content
OpenAdvisories

Product · MongoDB

Database Tools

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-119672

    mongofiles may disclose GridFS content to standard output through a stored filename

    MongoDB Database Tools mongofiles uses a database-stored GridFS filename as the output destination for get_id when --local is not specified. A user who can modify the file metadata can set the stored filename to '-', causing a later authorized retrieval to wr…

    MongoDB Database Tools mongo-tools Ubuntu
  • Medium 6.8
    CVE-2026-116641

    The DB Tools trust certificates issued by recoverable eMudhra intermediate CAs

    The DB Tools rely on the TLS implementation in Golang’s standard library, which generally uses the system CA store. However, the crypto/x509 package also has its own internal denylist of known-bad CA certificates. Golang 1.27.3 adds the eMudhra certificates t…

    MongoDB Database Tools mongo-tools Ubuntu