mongosh vulnerabilities

2 known vulnerabilities in mongosh from MongoDB. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  mongosh: Untrusted Search Path

  CVE-2025-1756Feb 27, 2025MongoDB

  mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\node_modules\. This issue affects mongosh prior to 2.3.0

• 8.8 High severity

  mongosh: Improper Neutralization of Escape, Meta, or Control Sequences

  CVE-2025-1692Feb 27, 2025MongoDB

  The MongoDB Shell may be susceptible to control character injection where an attacker with control of the user’s clipboard could manipulate them to paste text into mongosh that evaluates arbitrary code. Control characters in the pasted text can be used to obfu