● CVE — High
CVE-2025-1755
Vendorredhat, mongodbProductenterprise linux for arm 64, enterprise linux for ibm z systems, enterprise linux server for power little endian update services for sap solutions, enterprise linux update services for sap solutions, compassDiscoveredFeb 27, 2025UpdatedApr 9, 2025
MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privileges, when a crafted file is stored in C:\node_modules\. This issue affects MongoDB Compass prior to 1.42.1