Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-1756

MongoDB Shell may be susceptible to local privilege escalation in Windows

Description

mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\node_modules\. This issue affects mongosh prior to 2.3.0

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MongoDB Inc mongosh

Default version status: unaffected

  • 0 to < 2.3.0affected

References