Certificate Store Vulnerability in MongoDB Compass
CVE-2026-115929

7.6HIGH

Key Information:

Vendor

Mongodb, Inc.

Status
Compass
Vendor
CVE Published:
24 October 2026

What is CVE-2026-115929?

MongoDB Compass relies on the Electron framework, which utilizes a TLS root certificate store that includes the recoverable eMudhra intermediate CA certificates. This vulnerability may expose users to potential security risks if the compromised certificates are exploited. An update to Compass version 1.53.1 is necessary to mitigate this issue, as it incorporates an updated version of Electron (44.9.1) that addresses the vulnerabilities associated with the eMudhra certificates.

Affected Version(s)

Compass 0 < 1.53.1

References

https://github.com/mongodb-js/compass/releases/tag/v1.53.1
https://releases.electronjs.org/release/v44.9.1
https://blog.mozilla.org/security/2026/10/20/protecting-f...

CVSS V4

Score:
7.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.