Local Privilege Escalation Vulnerability in MongoDB Compass by MongoDB

CVE-2025-1755

What is CVE-2025-1755?

MongoDB Compass is vulnerable to local privilege escalation under specific conditions, allowing unauthorized users to perform actions on a system with elevated privileges. This issue arises when a maliciously crafted file is placed within the C:\node_modules\ directory. Affected users running versions of MongoDB Compass earlier than 1.42.1 should prioritize upgrading their software to mitigate potential risks associated with this vulnerability.

References