Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2025-1691

šŸ—“ļøĀ 27 Feb 2025Ā 12:34:02Reported byĀ mongodbTypeĀ 
cve
Ā cvešŸ”—Ā web.nvd.nist.govšŸ‘Ā 45Ā Views

MongoDB Shell vulnerable to control character injection via autocompletion before version 2.3.9.

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
Circl		CVE-2025-1691
27 Feb 202513:27
ā€“circl
CNNVD		MongoDB Shell ę³Øå…„ę¼ę“ž
27 Feb 202500:00
ā€“cnnvd
Cvelist		CVE-2025-1691 MongoDB Shell may be susceptible to Control Character Injection via autocomplete
27 Feb 202512:34
ā€“cvelist
EUVD		EUVD-2025-5466
3 Oct 202520:07
ā€“euvd
Github Security Blog		MongoDB Shell may be susceptible to Control Character Injection via autocomplete
27 Feb 202515:31
ā€“github
MongoDB		MongoDB Shell may be susceptible to Control Character Injection via autocomplete
27 Feb 202512:31
ā€“mongodb
Tenable Nessus		MongoDB Shell < 2.3.9 Control Character Injection (MONGOSH-2024, MONGOSH-2025, MONGOSH-2026)
10 Apr 202500:00
ā€“nessus
NVD		CVE-2025-1691
27 Feb 202513:15
ā€“nvd
OSV		GHSA-43G5-2WR2-Q7VJ MongoDB Shell may be susceptible to Control Character Injection via autocomplete
27 Feb 202515:31
ā€“osv
Positive Technologies		PT-2025-8937
27 Feb 202500:00
ā€“ptsecurity
Rows per page
NVD
Node
mongodbmongoshRange<2.3.9
[
  {
    "cpes": [
      "cpe:2.3:a:mongodb:mongosh:0.2.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:0.3.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:0.4.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:0.4.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:0.5.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:0.5.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:0.6.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:0.7.7:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:0.8.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:0.8.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:0.8.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:0.9.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:0.10.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:0.10.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:0.11.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:0.12.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:0.12.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:0.13.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:0.14.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:0.15.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:0.15.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:0.15.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.0.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.0.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.0.5:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.0.6:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.0.7:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.1.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.1.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.1.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.1.5:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.1.6:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.1.7:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.1.8:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.1.9:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.2.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.2.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.2.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.3.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.4.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.4.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.5.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.5.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.5.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.5.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.5.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.6.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.6.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.6.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.7.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.7.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.8.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.8.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.90:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.91:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.10.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.10.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.10.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.10.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.10.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.10.5:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:1.10.6:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.0.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.0.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.0.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.1.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.1.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.1.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.1.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.1.5:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.2.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.2.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.2.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.2.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.2.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.2.5:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.2.6:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.2.9:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.2.10:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.2.11:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.2.12:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.2.15:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.3.0:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.3.1:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.3.2:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.3.3:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.3.4:*:*:*:*:*:*:*",
      "cpe:2.3:a:mongodb:mongosh:2.3.8:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "mongosh",
    "vendor": "MongoDB Inc",
    "versions": [
      {
        "lessThan": "2.3.9",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
22 Sep 2025 16:42Current
7.6High risk
Vulners AI Score7.6
CVSS 3.16.5 - 7.6
EPSS0.00393
SSVC
CWE-74
mongodb shellcontrol character injectionautocompletion vulnerabilityuser interaction requiredattacker-controlled cluster.
45