← Database
CVE-2025-1755
HIGH
CVSS: 7.5
Published: 2025-02-27
Modified: 2026-06-17
Description
MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privileges, when a crafted file is stored in C:\node_modules\. This issue affects MongoDB Compass prior to 1.42.1
Affected Platforms
Microsoft WindowsRedhat Enterprise Linux For Arm 64Mongodb CompassRedhat Enterprise Linux Update Services For Sap SolutionsRedhat Enterprise Linux Server For Power Little Endian Update Services For Sap SolutionsRedhat Enterprise Linux For Ibm Z Systems
Weakness Type
CWE-426, CWE-426