CVE-2025-1756
published 2025-02-27CVE-2025-1756: mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated…
PriorityP340high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.16%
5.2th percentile
mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\node_modules\. This issue affects mongosh prior to 2.3.0
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mongodb | mongosh | < 2.3.0 | 2.3.0 |
| mongodb_inc | mongosh | < 2.3.0 | 2.3.0 |
| mongodb_inc | mongosh | >= 0 < 2.3.0 | 2.3.0 |
| redhat | codeready_linux_builder_eus | — | — |
| redhat | codeready_linux_builder_for_arm64_eus | — | — |
| redhat | codeready_linux_builder_for_ibm_z_systems_eus | — | — |
| redhat | codeready_linux_builder_for_power_little_endian_eus | — | — |
| redhat | enterprise_linux_eus | — | — |
| redhat | enterprise_linux_for_arm_64 | — | — |
| redhat | enterprise_linux_for_arm_64_eus | — | — |
| redhat | enterprise_linux_for_ibm_z_systems | — | — |
| redhat | enterprise_linux_for_ibm_z_systems_eus | — | — |
| redhat | enterprise_linux_for_power_little_endian_eus | — | — |
| redhat | enterprise_linux_server_aus | — | — |
| redhat | enterprise_linux_update_services_for_sap_solutions | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
mongosh vulnerable to local privilege escalation
osv·2025-02-27
CVE-2025-1756 [HIGH] mongosh vulnerable to local privilege escalation
mongosh vulnerable to local privilege escalation
mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\node_modules\. This issue affects mongosh prior to 2.3.0.
GHSA
mongosh vulnerable to local privilege escalation
ghsa·2025-02-27
CVE-2025-1756 [HIGH] CWE-426 mongosh vulnerable to local privilege escalation
mongosh vulnerable to local privilege escalation
mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\node_modules\. This issue affects mongosh prior to 2.3.0.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-02-27
Published