VYPR
← All advisories
Medium severity4.2NVD Advisory· Published Jun 26, 2025· Updated Jun 17, 2026

CVE-2025-6707

CVE-2025-6707

Description

Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.24, MongoDB Server v7.0 version prior to 7.0.21 and MongoDB Server v8.0 version prior to 8.0.5.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • MongoDB/MongoDB2 versions
    cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*range: >=5.0.0,<5.0.31
    • cpe:2.3:a:mongodb:mongodb:5.0.0:*:*:*:*:*:*:*range: 5.0
  • MongoDB/Serverllm-fuzzy
    Range: <5.0.31 || <6.0.24 || <7.0.21 || <8.0.5
  • osv-coords
    pkg:bitnami/mongodb
    Range: >= 5.0.0, < 5.0.31

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.