CVE-2026-25609
profile command may permit unauthorized configuration
Summary
profile command may permit unauthorized configuration
Original description
The description as published by the source.
Incorrect validation of the profile command may result in the determination that a request altering the 'filter' is read-only.
Affected packages
Bitnami
mongodb
[{"type":"SEMVER","events":[{"introduced":"7.0.0"},{"fixed":"7.0.29"},{"introduced":"8.0.0"},{"fixed":"8.0.18"},{"introduced":"8.2.0"},{"fixed":"8.2.4"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- web jira.mongodb.org