Skip to content
CVE PROGRAM SOURCE RECORD7.6 High

CVE-2026-115929

MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
mongodb

Description

MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes Electron 44.9.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MongoDB, Inc. Compass

Default version status: unaffected

  • 0 to < 1.53.1affected

References