Product by MongoDB
MongoDB Compass
8 known vulnerabilities in MongoDB Compass (MongoDB), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-113870 | Improper Encoding of Server-Supplied JavaScript Values in MongoDB Compass BSON Parsing | 8.8 | |
| High | CVE-2026-96750 | Shell script injection via server-supplied database name in Open MongoDB shell | 7.1 | |
| High | CVE-2026-14881 | MongoDB Compass: OS Command Injection | 7.8 | |
| Critical | CVE-2024-6376 | ejson shell parser in MongoDB Compass maybe bypassed | 7.0 | |
| Medium | CVE-2026-9101 | Prototype pollution in csv parsing | 4.3 | |
| High | CVE-2025-1755 | MongoDB Compass may be susceptible to local privilege escalation in Windows | 7.5 | |
| High | CVE-2024-3371 | Insufficient validation of external input in Compass may enable MITM attacks | 7.1 | |
| High | CVE-2021-20334 | Local privilege escalation in MongoDB Compass for Windows | 4.8 |