Local Privilege Escalation Vulnerability in MongoDB Compass by MongoDB
CVE-2025-1755
7.8HIGH
Key Information:
- Vendor
MongoDB
- Status
- Vendor
- CVE Published:
- 27 February 2025
What is CVE-2025-1755?
MongoDB Compass is vulnerable to local privilege escalation under specific conditions, allowing unauthorized users to perform actions on a system with elevated privileges. This issue arises when a maliciously crafted file is placed within the C:\node_modules\ directory. Affected users running versions of MongoDB Compass earlier than 1.42.1 should prioritize upgrading their software to mitigate potential risks associated with this vulnerability.
Affected Version(s)
MongoDB Compass 0 < 1.42.1