VendorsMongoDBcompassany version
Vulnerabilities

MongoDB Compass any version

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

5CVEs
CVE-2024-6376
ejson shell parser in MongoDB Compass maybe bypassed
Published 2024-07-01 · Modified
9.8EPSS 0.005
CVE-2026-14881
Compass connection import allows to override OIDC browser open command (usually set through settings), allowing for arbitrary shell commands execution when connecting to cluster using OIDC auth flow
Published 2026-07-22 · Analyzed
8.4EPSS 0.002
CVE-2021-20334
Local privilege escalation in MongoDB Compass for Windows
Published 2021-04-06 · Modified
7.8EPSS 0.004
CVE-2025-1755
MongoDB Compass may be susceptible to local privilege escalation in Windows
Published 2025-02-27 · Analyzed
7.8EPSS 0.001
CVE-2024-3371
Insufficient validation of external input in Compass may enable MITM attacks
Published 2024-04-24 · Analyzed
7.1EPSS 0.002