CVE record · 1 source
CVE-2026-113870
CVSS 8.8MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editable source.
- Vendor
- MongoDB
- Product
- MongoDB
- CVSS
- 8.8
- Exposure class
- Database
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editable source.
MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editable source. When a user connects to a MongoDB deployment containing a specially crafted view and opens that…