CVE-2025-1755: MongoDB Compass may be susceptible to local privilege escalation in Windows
Published Feb 27, 2025
·Updated
MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privileges, when a crafted file is stored in C:\nodemodules\. This issue affects MongoDB Compass prior to 1.42.1
Affected Software
1 affected component
MongoDB Compass<1.42.1
Event History
Feb 27, 2025
CVE Published
via MITRE·03:24 PM
Data Sourced
via MITRE·03:24 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-1755?
CVE-2025-1755 is classified as a local privilege escalation vulnerability in MongoDB Compass.
2
How do I fix CVE-2025-1755?
To fix CVE-2025-1755, upgrade MongoDB Compass to version 1.42.1 or later.
3
What versions of MongoDB Compass are affected by CVE-2025-1755?
MongoDB Compass versions prior to 1.42.1 are affected by CVE-2025-1755.
4
What is the potential impact of CVE-2025-1755?
CVE-2025-1755 may allow unauthorized actions on a user's system with elevated privileges.
5
Is there a workaround for CVE-2025-1755?
No specific workaround is provided for CVE-2025-1755; the best mitigation is to upgrade to the fixed version.