← Voltar à pesquisa de CVEs

CVE-2026-14881

MongoDB Compass

Descrição

When importing connections in Compass it is possible to override some connection options that are otherwise can-t be changed via connection form. In particular it is possible to provide a custom browser open command for OIDC auth flow that is usually can be set only globally via Compass settings.

CVSS 7.8EPSS 0.152%Risco 0.79
Ver fonte
Publicação
2026-07-22 20:16:48
Versões afetadas
unknown
Tipo
Software crítico
Última alteração
2026-07-24 05:16:38
Vetor
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H