Mongodb Mongosh — known CVE vulnerabilities

Every CVE whose affected-product data names Mongodb Mongosh, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2025-1691 — CVSS 7.6 (high): The MongoDB Shell may be susceptible to control character injection where an attacker with control of the mongosh autocomplete feature, can…
• CVE-2025-1756 — CVSS 7.5 (high): mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's…
• CVE-2025-1692 — CVSS 6.3 (medium): The MongoDB Shell may be susceptible to control character injection where an attacker with control of the user’s clipboard could…
• CVE-2025-1693 — CVSS 3.9 (low): The MongoDB Shell may be susceptible to control character injection where an attacker with control over the database cluster contents can…