← Back to CVE search

CVE-2026-14881

MongoDB Compass

Description

When importing connections in Compass it is possible to override some connection options that are otherwise can-t be changed via connection form. In particular it is possible to provide a custom browser open command for OIDC auth flow that is usually can be set only globally via Compass settings.

CVSS 7.8EPSS 0.152%Risk 0.79
View source
Published
2026-07-22 20:16:48
Affected versions
unknown
Type
Critical software
Last modified
2026-07-24 05:16:38
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H