CVE-2026-113870 | MongoDB Compass up to 1.49.14 Aggregation Pipeline code injection

October 21, 2026 Yanac

A vulnerability was found in MongoDB Compass up to 1.49.14 and classified as problematic. This affects an unknown function of the component Aggregation Pipeline. Executing a manipulation can lead to code injection.

This vulnerability is registered as CVE-2026-113870. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More