← Volver al buscador de CVEs

CVE-2026-14881

MongoDB Compass

Descripción

When importing connections in Compass it is possible to override some connection options that are otherwise can-t be changed via connection form. In particular it is possible to provide a custom browser open command for OIDC auth flow that is usually can be set only globally via Compass settings.

CVSS 7.8EPSS 0.152%Riesgo 0.79
Ver fuente
Publicación
2026-07-22 20:16:48
Versiones afectadas
unknown
Tipo
Software crítico
Última modificación
2026-07-24 05:16:38
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H