Fresh MongoDB Vulnerability Exploited in Attacks

Back Feeds.Feedburner

Fresh MongoDB Vulnerability Exploited in Attacks

Feeds.Feedburner •Ionut Arghire • December 29, 2025

Share: View original

Dubbed MongoBleed, the high-severity flaw allows unauthenticated, remote attackers to leak sensitive information from MongoDB servers.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

MongoBleed Vulnerability in MongoDB Exploited by Attackers A new vulnerability, dubbed MongoBleed, has been identified in MongoDB, allowing unauthenticated remote attackers to leak sensitive information from affected servers. The flaw has been exploited in attacks, with a proof-of-concept (PoC) exploit released shortly after its discovery, enabling the extraction of session tokens, passwords, and API keys. 2 sources 26

Extracted Entities

Attack Types (1)

Platforms (1)

Vulnerabilities (1)