Description
MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privileges, when a crafted file is stored in C:\node_modules\. This issue affects MongoDB Compass prior to 1.42.1
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MongoDB | MongoDB Compass | < 1.42.1 | 1.42.1 |
Advisories 1
- WID-SEC-2025-0454 MongoDB und MongoDB Compass: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 27, 2025