← CVE Intelligence

CVE-2025-1756

MongoDB Shell may be susceptible to local privilege escalation in Windows PUBLISHED

Description (CNA)

mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\node_modules\. This issue affects mongosh prior to 2.3.0

Affected (CNA)

Vendor / productVersions
MongoDB Inc / mongoshaffected 0 before 2.3.0

CWE

CWE-426

References

ADP enrichment

CISA-ADP

No English description supplied.