CVE-2025-1756
MongoDB Shell may be susceptible to local privilege escalation in Windows
Summary
MongoDB Shell may be susceptible to local privilege escalation in Windows
Original description
The description as published by the source.
mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\node_modules. This issue affects mongosh prior to 2.3.0
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory access.redhat.com
- advisory github.com
- advisory nvd.nist.gov
- web jira.mongodb.org