CVE-2025-1755 — MongoDB Compass may be susceptible to local privilege escalation in Windows

CVE-2025-1755

MongoDB Compass may be susceptible to local privilege escalation in Windows PUBLISHED

Description (CNA)

MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privileges, when a crafted file is stored in C:\node_modules\. This issue affects MongoDB Compass prior to 1.42.1

Affected (CNA)

Vendor / product	Versions
MongoDB Inc / MongoDB Compass	affected 0 before 1.42.1

CWE

CWE-426

References

https://jira.mongodb.org/browse/COMPASS-9058

ADP enrichment

CISA-ADP

No English description supplied.

https://access.redhat.com/errata/RHSA-2025:1755.html