MongoDB Database Tools vulnerabilities

Newest CVEs

• CVE-2026-119674

  mongorestore may restore encoded collection names into an unintended collection

  MongoDB · Database Tools

  Low2.1
• CVE-2026-119673

  mongofiles may write outside the working directory through a symlink

  MongoDB · Database Tools

  Low1.0
• CVE-2026-119672

  mongofiles may disclose GridFS content to standard output through a stored filename

  MongoDB · Database Tools

  Medium5.9
• CVE-2026-119675

  mongorestore may bypass collection guards through a system.buckets prefix

  MongoDB · Database Tools

  Medium5.2
• CVE-2026-116641

  The DB Tools trust certificates issued by recoverable eMudhra intermediate CAs

  MongoDB · Database Tools

  High7.6