What is CVE-2025-3082?

CVE-2025-3082 is a low-severity vulnerability in MongoDB, classified under Improper Access Control. CVSS score: 3.1/10. Published 2025-04-01.

How severe is CVE-2025-3082?

Low severity. CVSS v3 base score is 3.1 out of 10.

Vulnerability in MongoDB

CVE-2025-3082

A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different or unintended view of underlying data. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.20, MongoDB Server v7.0 version prior to 7.0.14 and MongoDB Server v7.3 versions prior to 7.3.4.

EPSS: 0.002 (8.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.1 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Mongodb
Mongodb Inc Server — versions 5.0, 6.0, 7.0

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

cna@mongodb.com (Issue Tracking, Vendor Advisory)

Frequently asked questions

What is CVE-2025-3082?: CVE-2025-3082 is a low-severity vulnerability in MongoDB, classified under Improper Access Control. CVSS score: 3.1/10. Published 2025-04-01.
How severe is CVE-2025-3082?: Low severity. CVSS v3 base score is 3.1 out of 10.