Beveiligingsadvies

CVE-2026-9101

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-20 16:18:10
Laatst bijgewerkt 2026-05-27 13:10:03
Toegewezen door mongodb
CVSS-score 5.3
Status PUBLISHED

Beschrijving

Prototype pollution in csv parsing logic during import can lead to untrusted file paths (but not arguments) entering shell.openExternal after specific user behavior leading to "1-click" command execution.