Skip to content
MongoBleed Vulnerability in MongoDB Exploited by Attackers

MongoBleed Vulnerability in MongoDB Exploited by Attackers

First seen 29 Dec 2025, 16:17 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 13:27 UTC

A new vulnerability, dubbed MongoBleed, has been identified in MongoDB, allowing unauthenticated remote attackers to leak sensitive information from affected servers. The flaw has been exploited in attacks, with a proof-of-concept (PoC) exploit released shortly after its discovery, enabling the extraction of session tokens, passwords, and API keys.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 184d ago How this analysis works

More articles in this cluster (2)