VYPR

mongorestore

by MongoDB

CVEs (1)

  • CVE-2026-119675HigNov 3, 2026
    risk 0.56cvss 8.6epss —

    MongoDB Database Tools mongorestore inconsistently handles the system.buckets. prefix when validating collection names in an untrusted dump. A specially crafted collection name can bypass special-collection guards and operator namespace filters, causing a restore to create an…