Product by Mongodb Inc.
Mongodb Compass
5 known vulnerabilities in Mongodb Compass (Mongodb Inc.), 0 of them actively exploited (CISA KEV).
Key figures
5
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-115929 | MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs | 6.8 | |
| Critical | CVE-2024-6376 | ejson shell parser in MongoDB Compass maybe bypassed | 7.0 | |
| High | CVE-2025-1755 | MongoDB Compass may be susceptible to local privilege escalation in Windows | 7.5 | |
| High | CVE-2024-3371 | Insufficient validation of external input in Compass may enable MITM attacks | 7.1 | |
| High | CVE-2021-20334 | Local privilege escalation in MongoDB Compass for Windows | 4.8 |