CVE-2025-14847

CVE-2025-14847 CVE-2025-14847 脆弱性環境に付属のPoC https://jira.mongodb.org/browse/SERVER-115508 概要 これは CVE-2025-14847 に対処するための重要な修正です。バージョン 8.2.3、8.0.17、7.0.28、6.0.27、5.0.32、または 4.4.30 にアップグレードしてください。 問題の説明と影響 サーバーの zlib...

mongoaudit

mongoaudit is a CLI tool for auditing MongoDB servers, detecting poor security settings and performing automated penetration testing. Installing Clone this repository and run the setup: root@kitploit: git clone https://github.com/stampery/mongoaudit.git cd mongoaudit python setup.py install...

CVE-2025-14847

🚨 CVE-2025-14847 — “MongoBleed” 一个高危的未认证内存泄露漏洞 📖 目录 概述 技术细节 严重性与CVSS评分 受影响版本 真实影响 利用概要 检测指南 修复措施 临时缓解措施 安全清单 总结 🔎 概述 CVE-2025-14847 ，绰号 “MongoBleed” ，是MongoDB服务器网络协议处理中的一个漏洞。 它允许远程、未认证的攻击者 从易受攻击的MongoDB进程中读取未初始化的堆内存 。 这可能导致敏感信息泄露，例如： 🔑 凭据 🔐 加密密钥 🎟 会话令牌 📦 内部运行时数据 🧠 技术细节 🧩 根本原因 问题源于： zlib压缩协议头部...

CVE-2025-14847

CVE-2025-14847 MongoBleed 📜 描述 此脚本旨在利用 MongoDB 服务器中被称为 CVE-2025-14847 （"MongoBleed"）的 堆内存泄露漏洞 。通过发送特制的经 zlib 压缩的 OPMSG 数据包，并带有膨胀的文档长度，该脚本欺骗服务器在其响应中返回未初始化的堆内存。这可能会泄露敏感信息，例如： 脚本持续发送带有不同偏移量的探测，并实时打印 新观察到的泄露字符串 。它抑制重复项以保持输出清晰可读。 致谢 Joe Desimone 的原始 PoC 对定义的偏移范围执行单次遍历 ，收集所有唯一片段，保存到文件，并可选择在最后高亮有趣的模式。...

BIT-MONGODB-2026-82074 Incorrect Authorization in MongoDB Server Aggregation Framework Allows Unauthorized Read Access to Collection Data

MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user with minimal privileges can craft a specially formatted aggregation request that causes the server's authorization subsystem to evaluate a different operation than what is actually...

BIT-MONGODB-2026-82073 Improper Validation in MongoDB Server Aggregation Framework Allows Authorization Bypass and Unauthorized Collection Access with Atlas Search

A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an...

BIT-MONGODB-2026-82071 Insufficient Validation of Storage Engine Configuration Options in MongoDB Server Leads to Out-of-Bounds Write

Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collection creation that override internal storage metadata. This results in an out-of-bounds memory write in the server process...

BIT-MONGODB-2026-82070 Insufficiently Protected Credentials in MongoDB Server Diagnostic Reporting Interface

A security issue in MongoDB Server's diagnostic reporting interface allows an authenticated user with monitoring privileges to access insufficiently protected credentials from concurrent administrative operations. The same credentials are properly redacted in server log output, but the diagnostic...

BIT-MONGODB-2026-82069 Improper Redaction of Query Literals in MongoDB Server Query Statistics Serialization on Sharded Cluster Router

A security issue in MongoDB Server's query statistics serialization on the router allows users with monitoring privileges to access unredacted search query text from other users' operations. An improper conditional check in the serialization logic causes the data redaction mechanism to be bypasse...

BIT-MONGODB-2026-82068 Persistent Fatal Assertion Crash in MongoDB Server via Crafted Retryable Write Commands Leads to Denial of Service

A security issue in MongoDB Server allows an authenticated user with write privileges to trigger a persistent fatal assertion crash by sending specially crafted retryable write commands. The crash state is durably persisted, causing the server process to repeatedly crash on restart and potentiall...

BIT-MONGODB-2026-82067 Improper Case Sensitivity Handling in MongoDB Server Configuration Validation May Cause Authorization to Remain Disabled at Startup

Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default disabled state during server startup. An unauthenticated user with network access to a deployment where this condition occurs can perform...

BIT-MONGODB-2026-82066 Heap Out-of-Bounds Read in MongoDB Server Query Planning Component

A heap out-of-bounds read security issue exists in the query planning component of MongoDB Server. An authenticated user with database read and write privileges can trigger the security issue through crafted query operations, causing the server to read memory beyond allocated buffer boundaries. T...

BIT-MONGODB-2026-82065 Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata

A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validation of user-supplied storage configuration options permits values that, once persisted to durable...

BIT-MONGODB-2026-82064 Unauthenticated Denial of Service in MongoDB Server via Assertion Failure in Read Concern Processing on Replica Set Members

A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in its read concern processing logic that can be reached without authentication, and the assertion's assumptions about...

BIT-MONGODB-2026-82063 Use-After-Free in MongoDB Server Cursor Management Component Leads to Denial of Service

A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific timing conditions during cursor operations, a stale pointer to a freed resource may be retained and subsequently dereferenced during curso...

BIT-MONGODB-2026-82061 Use-After-Free in MongoDB Server Query Execution Memory Tracking Subsystem Leads to Denial of Service

A use-after-free security issue exists in the server's query execution memory tracking subsystem. An authenticated user with read privileges can trigger a write to freed heap memory through a sequence of standard database commands, leading to server process crash or potential memory corruption. N...

BIT-MONGODB-2026-82059 Improper Access Restriction of Internal Aggregation Expression in MongoDB Server Leads to Assertion Failure and Denial of Service

An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges...

BIT-MONGODB-2026-82058 Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

BIT-MONGODB-2026-82056 Race Condition in MongoDB Server Text Index Query Parsing Leads to Heap Use-After-Free and Denial of Service

A race condition in MongoDB server's text index query parsing can cause a heap use-after-free read when handling upsert retry paths. Under certain concurrent index lifecycle operations, a raw pointer to internal text index metadata may be dereferenced after the underlying structures have been...

BIT-MONGODB-2026-82054 Uncontrolled Resource Consumption in MongoDB Server JSON Pointer Parser Leads to Denial of Service

A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size,...