Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-1755

MongoDB Compass may be susceptible to local privilege escalation in Windows

Description

MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privileges, when a crafted file is stored in C:\node_modules\. This issue affects MongoDB Compass prior to 1.42.1

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MongoDB Inc MongoDB Compass

Default version status: unaffected

  • 0 to < 1.42.1affected

References