Mongodb Inc Compass vulnerabilities

CVE-2026-115929 [MEDIUM] CWE-295 CVE-2026-115929: MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA certificates. Issue is resolved by updating to Compass 1.53.1, which includes Electron 44.9.1.

CVE-2026-9101 [MEDIUM] CWE-1321 CVE-2026-9101: Prototype pollution in csv parsing logic during import can lead to untrusted file paths (but not arg Prototype pollution in csv parsing logic during import can lead to untrusted file paths (but not arguments) entering shell.openExternal after specific user behavior leading to "1-click" command execution.