VULNERABILITY INTELLIGENCE

CVE-2025-1756

CVSS score7.5 HIGH
EPSS probability0.16%
CISA KEVNot currently listed
Published2025-02-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Description

mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\node_modules\. This issue affects mongosh prior to 2.3.0

Weakness classification

  • cna@mongodb.com: CWE-426
  • nvd@nist.gov: CWE-426

Primary references