MongoDB Inc. MongoDB for VS Code vulnerabilities (CVE)

CVE records published for MongoDB Inc. MongoDB for VS Code, newest first. Follow to get an email when a new one appears.

2 results

4.3Medium

CVE-2026-84967 2 months ago

Arbitrary command execution via shell-expanded connection string in Launch MongoDB Shell terminal

MongoDB MongoDB for VS Code

A component of the MongoDB extension for Visual Studio Code does not neutralize special characters in a connection string before that value is placed into a command line the extension composes for an integrated terminal. An unauthenticated remote unauthorized…

5.5Medium

CVE-2021-32039 4 years ago

MongoDB Extension for VS Code may unexpectedly store credentials locally in clear text

MongoDB Inc. MongoDB for VS Code; mongodb mongodb

Users with appropriate file access may be able to access unencrypted user credentials saved by MongoDB Extension for VS Code in a binary file. These credentials may be used by malicious attackers to perform unauthorized actions. This vulnerability affects all…