CVE-2026-9101
EUVD-2026-3112720.05.2026, 17:16
Prototype pollution in csv parsing logic during import can lead to untrusted file paths (but not arguments) entering shell.openExternal after specific user behavior leading to "1-click" command execution.
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| mongodb | compass | 1.36.3 | CNA |
| mongodb | compass | 1.36.4 | CNA |
| mongodb | compass | 1.37.0 | CNA |
| mongodb | compass | 1.38.0 | CNA |
| mongodb | compass | 1.38.1 | CNA |
| mongodb | compass | 1.38.2 | CNA |
| mongodb | compass | 1.39.0 | CNA |
| mongodb | compass | 1.39.1 | CNA |
| mongodb | compass | 1.39.2 | CNA |
| mongodb | compass | 1.39.3 | CNA |
| mongodb | compass | 1.39.4 | CNA |
| mongodb | compass | 1.40.0 | CNA |
| mongodb | compass | 1.40.1 | CNA |
| mongodb | compass | 1.40.2 | CNA |
| mongodb | compass | 1.40.3 | CNA |
| mongodb | compass | 1.40.4 | CNA |
| mongodb | compass | 1.41.0 | CNA |
| mongodb | compass | 1.42.0 | CNA |
| mongodb | compass | 1.42.1 | CNA |
| mongodb | compass | 1.42.2 | CNA |
| mongodb | compass | 1.42.3 | CNA |
| mongodb | compass | 1.42.5 | CNA |
| mongodb | compass | 1.43.0 | CNA |
| mongodb | compass | 1.43.1 | CNA |
| mongodb | compass | 1.43.2 | CNA |
| mongodb | compass | 1.43.3 | CNA |
| mongodb | compass | 1.43.4 | CNA |
| mongodb | compass | 1.43.5 | CNA |
| mongodb | compass | 1.43.6 | CNA |
| mongodb | compass | 1.44.0 | CNA |
| mongodb | compass | 1.44.3 | CNA |
| mongodb | compass | 1.44.4 | CNA |
| mongodb | compass | 1.44.5 | CNA |
| mongodb | compass | 1.44.6 | CNA |
| mongodb | compass | 1.44.7 | CNA |
| mongodb | compass | 1.45.0 | CNA |
| mongodb | compass | 1.45.1 | CNA |
| mongodb | compass | 1.45.2 | CNA |
| mongodb | compass | 1.45.3 | CNA |
| mongodb | compass | 1.45.4 | CNA |
| mongodb | compass | 1.46.0 | CNA |
| mongodb | compass | 1.46.1 | CNA |
| mongodb | compass | 1.46.2 | CNA |
| mongodb | compass | 1.46.3 | CNA |
| mongodb | compass | 1.46.4 | CNA |
| mongodb | compass | 1.46.5 | CNA |
| mongodb | compass | 1.46.6 | CNA |
| mongodb | compass | 1.46.7 | CNA |
| mongodb | compass | 1.46.8 | CNA |
| mongodb | compass | 1.46.9 | CNA |
| mongodb | compass | 1.46.10 | CNA |
| mongodb | compass | 1.46.11 | CNA |
| mongodb | compass | 1.47.0 | CNA |
| mongodb | compass | 1.47.1 | CNA |
| mongodb | compass | 1.48.0 | CNA |
| mongodb | compass | 1.48.1 | CNA |
| mongodb | compass | 1.48.2 | CNA |
| mongodb | compass | 1.49.0 | CNA |
| mongodb | compass | 1.49.1 | CNA |
| mongodb | compass | 1.49.2 | CNA |
| mongodb | compass | 1.49.3 | CNA |
| mongodb | compass | 1.49.4 | CNA |
| mongodb | compass | 1.49.5 | CNA |