VYPR
← All advisories
Medium severity4.8NVD Advisory· Published Apr 6, 2021· Updated Jun 17, 2026

CVE-2021-20334

CVE-2021-20334

Description

A malicious 3rd party with local access to the Windows machine where MongoDB Compass is installed can execute arbitrary software with the privileges of the user who is running MongoDB Compass. This issue affects: MongoDB Inc. MongoDB Compass 1.x version 1.3.0 on Windows and later versions; 1.x versions prior to 1.25.0 on Windows.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • MongoDB/Compass3 versions
    cpe:2.3:a:mongodb:compass:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:mongodb:compass:*:*:*:*:*:*:*:*range: >=1.3.0,<1.25.0
    • (no CPE)range: 1.x versions prior to 1.25.0 on Windows; 1.x version 1.3.0 on Windows and later versions
    • (no CPE)range: 1.3.0

Patches

Vulnerability mechanics

References

1

News mentions

1