Critical MongoDB Vulnerability Exposes Sensitive Data Through zlib Compression

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical MongoDB Vulnerability Exposes Sensitive Data via zlib Compression A critical vulnerability, tracked as CVE-2025-14847, has been identified in MongoDB's zlib compression implementation, allowing attackers to extract uninitialized heap memory from database servers without authentication. This flaw affects multiple versions of MongoDB and could potentially expose sensitive data stored in uninitialized heap memory. 6 sources 52