CVE-2025-6707

MEDIUM

Race condition in privilege cache invalidation cycle

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2025-6707 has a selected CVSS score of 4.2 (medium).

Description

Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.24, MongoDB Server v7.0 version prior to 7.0.21 and MongoDB Server v8.0 version prior to 8.0.5.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 27, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

MongoDB Server

Browse MongoDB Inc / MongoDB Server

Default status: unaffected

CVE List5.0 to < 5.0.31affected
6.0 to < 6.0.24affected
7.0 to < 7.0.21affected
8.0 to < 8.0.5affected

References

2