Login Request a demo
High severity · published Feb 27, 2025
CVE-2025-1756
mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a…
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\node_modules\. This issue affects mongosh prior to 2.3.0
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 5% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Codeready Linux Builder Eus · Redhat
9.4 · source: NVD
CL
Codeready Linux Builder For Arm64 Eus · Redhat
9.4_aarch64 · source: NVD
CL
Codeready Linux Builder For Ibm Z Systems Eus · Redhat
9.4_s390x · source: NVD
CL
Codeready Linux Builder For Power Little Endian Eus · Redhat
9.4_ppc64le · source: NVD
EL
Enterprise Linux Eus · Redhat
9.4 · source: NVD
EL
Enterprise Linux For Arm 64 · Redhat
9.4_aarch64 · source: NVD
EL
Enterprise Linux For Arm 64 Eus · Redhat
9.4_aarch64 · source: NVD
EL
Enterprise Linux For Ibm Z Systems · Redhat
9.4_s390x · source: NVD
EL
Enterprise Linux For Ibm Z Systems Eus · Redhat
9.4_s390x · source: NVD
EL
Enterprise Linux For Power Little Endian Eus · Redhat
9.4_ppc64le · source: NVD
EL
Enterprise Linux Server Aus · Redhat
9.4 · source: NVD
EL
Enterprise Linux Update Services For Sap Solutions · Redhat
9.4 · source: NVD
Affected product
MO
Mongosh
Mongodb
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-1756
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-1756
Issue Tracking
https://jira.mongodb.org/browse/MONGOSH-2028
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:1756
More from Mongosh
8.8
CVE-2025-1692
The MongoDB Shell may be susceptible to control character injection where an attacker with control of the user’s clipboard could manipulate them to paste text into mongosh that…
6.8
CVE-2025-1693
The MongoDB Shell may be susceptible to control character injection where an attacker with control over the database cluster contents can inject control characters into the shell…
6.5
CVE-2025-1691
The MongoDB Shell may be susceptible to control character injection where an attacker with control of the mongosh autocomplete feature, can use the autocompletion feature to input…