Description
When importing connections in Compass it is possible to override some connection options that are otherwise can't be changed via connection form. In particular it is possible to provide a custom browser open command for OIDC auth flow that is usually can be set only globally via Compass settings.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MongoDB | MongoDB Compass | 1.38.0 – < 1.49.7 | 1.49.7 |
Advisories 1
- WID-SEC-2026-2487 MongoDB: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 22, 2026