Vulnerability details
CVE-2025-6713
MongoDB Server
MongoDB Server may be susceptible to privilege escalation due to $mergeCursors stage
CVSS 3.1
7.7High
Official description
An unauthorized user may leverage a specially crafted aggregation pipeline to access data without proper authorization due to improper handling of the $mergeCursors stage in MongoDB Server. This may lead to access to data without further authorisation. This issue affects MongoDB Server MongoDB Server v8.0 versions prior to 8.0.7, MongoDB Server v7.0 versions prior to 7.0.19 and MongoDB Server v6.0 versions prior to 6.0.22
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.7High | 3.1 | CVEProject cvelistV5 (CNA) (mongodb) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| MongoDB, Inc. | MongoDB Server | 6.0 ≤ v < 6.0.22 | CVEProject cvelistV5 (CNA) |
| MongoDB, Inc. | MongoDB Server | 7.0 ≤ v < 7.0.19 | CVEProject cvelistV5 (CNA) |
| MongoDB, Inc. | MongoDB Server | 8.0 ≤ v < 8.0.7 | CVEProject cvelistV5 (CNA) |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-07-07
- Last updated
- 2025-07-18
- State
- Published
- Assigner (CNA)
- mongodb
Exploit prediction (EPSS)
0.46%
Probability of exploitation in 30 days
40.7%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-285Improper Authorization