Description
mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\node_modules\. This issue affects mongosh prior to 2.3.0
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MongoDB | mongosh | < 2.3.0 | 2.3.0 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | mongosh | < 2.3.0 | 2.3.0 | GHSA-f5w3-73h4-jpcm |
Advisories 1
- WID-SEC-2025-0454 MongoDB und MongoDB Compass: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 27, 2025