PT-2025-37717 · Mongodb · Mongodb Server

Published 2025-09-15 · Updated 2025-09-20 · CVE-2025-10491

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MongoDB Server versions prior to 6.0.25 MongoDB Server versions prior to 7.0.21 MongoDB Server versions prior to 8.0.5

Description The MongoDB Windows installation MSI may leave Access Control Lists (ACLs) unset on custom installation directories, potentially allowing a local attacker to introduce executable code into MongoDB’s process via DLL hijacking. DLL hijacking is a technique where a malicious Dynamic Link Library (DLL) is placed in a location where the application will load it instead of the legitimate DLL.

Recommendations Update MongoDB Server to version 6.0.25 or later. Update MongoDB Server to version 7.0.21 or later. Update MongoDB Server to version 8.0.5 or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-10491

Affected Products

Mongodb Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-10491 · Security Note
• https://twitter.com/CVEnew/status/1969292027083808936 · Twitter Post
• https://twitter.com/CCBalert/status/1968299527653192108 · Twitter Post
• https://t.me/CVEtracker/32524 · Telegram Post
• https://jira.mongodb.org/browse/SERVER-51366 · Note