All vulnerabilities

Servers and applications

CVE-2024-7553

Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB Server v5.0 versions prior to 5.0.27, MongoDB Server v6.0 versions prior to 6.0.16, MongoDB Server v7.0…

Severity
High 7.8
Published
7 Aug 2024
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
5.0.27, 6.0.16, 7.0.12, 7.3.3
Sources
NVD

Affected software

SoftwareAffected versions
MongoDBServers and applications · cpe:a:mongodb:mongodb
  • From 5.0.0 before 5.0.27
  • From 6.0.0 before 6.0.16
  • From 7.0.0 before 7.0.12
  • From 7.3.0 before 7.3.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-7553
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-7553