{"id":85629,"date":"2025-11-07T12:03:59","date_gmt":"2025-11-07T12:03:59","guid":{"rendered":""},"modified":"2025-11-11T11:04:10","modified_gmt":"2025-11-11T17:04:10","slug":"cve-2025-10491-mongodb-windows-installation-vulnerability-allowing-local-dll-hijacking","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-10491-mongodb-windows-installation-vulnerability-allowing-local-dll-hijacking\/","title":{"rendered":"CVE-2025-10491: MongoDB Windows Installation Vulnerability Allowing Local DLL Hijacking<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

This report examines the vulnerability CVE-2025-10491, a significant security issue affecting MongoDB Server installations on Windows platforms. The vulnerability, if exploited, allows local attackers to inject malicious code into MongoDB’s process via DLL hijacking, potentially leading to system compromise or data leakage. This vulnerability is especially concerning for organizations relying on MongoDB Server versions v6.0, v7.0, and v8.0.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-10491
\nSeverity: High (CVSS: 7.8)
\nAttack Vector: Local
\nPrivileges Required: Low
\nUser Interaction: Required
\nImpact: Potential system<\/a> compromise or data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n Share secrets securely\r\n <\/h2>\r\n\r\n

\r\n Ameeba is private infrastructure for communication and sensitive work built on encrypted identity instead of exposed corporate identity systems.\r\n <\/p>\r\n\r\n

\r\n Passwords, credentials, confidential files, screenshots, internal discussions, sensitive AI context, and private coordination should not become exposed across ordinary communication platforms.\r\n <\/p>\r\n\r\n