{"id":"CVE-2026-119675","kind":"vulnerability","aliases":["CVE-2026-119675"],"related":[],"title":"MongoDB Database Tools: mongorestore can create unauthorized root database accounts","description":"MongoDB Database Tools mongorestore inconsistently handles the system.buckets. prefix when validating collection names in an untrusted dump. A specially crafted collection name can bypass special-collection guards and operator namespace filters, causing a restore to create an unauthorized user-chosen database account, including an account with the root role. Exploitation requires an operator to restore unauthorized user-controlled data using credentials with sufficient user-management privileges on the destination deployment. Excluding the admin namespace alone does not prevent this behavior. This issue affects MongoDB Database Tools versions 100.4.0 through versions before 100.20.1.","summary":"A crafted collection name in an untrusted database dump can make mongorestore bypass its guards and create a database user the operator did not choose, including one with the root role. An attacker who supplies the dump can then log in to the destination database with that account.","severity":"high","cvss":8.6,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["database-tools","mongodb","mongorestore","package"],"not_affected_if":["no-user-management-credentials","trusted-dumps-only"],"how_to_check":"- Run `mongorestore --version` and compare against the affected range\n- Look for restores of dumps from untrusted sources in your backup or restore scripts\n- List database users on the destination deployment for accounts you did not create","fix":"- MongoDB Database Tools: upgrade to `100.20.1` or later","status":"open","published_at":"2026-11-03T17:18:07+00:00","first_seen_at":"2026-11-03T17:21:56+00:00","triaged_at":"2026-11-03T17:23:59+00:00","updated_at":"2026-11-03T17:23:59+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-11-03T17:23:59Z","model":"claude-haiku-5-5","output":{"fix":"- MongoDB Database Tools: upgrade to `100.20.1` or later","reach":"local","title":"MongoDB Database Tools: mongorestore can create unauthorized root database accounts","impact":"high","summary":"A crafted collection name in an untrusted database dump can make mongorestore bypass its guards and create a database user the operator did not choose, including one with the root role. An attacker who supplies the dump can then log in to the destination database with that account.","audience":"developers","category":"package","nicknames":[],"who_cares":["mongodb","mongorestore","database-tools"],"confidence":0.7,"fix_status":"available","needs_auth":"yes","worst_case":"attacker gets a root-role database account on the destination deployment","analyst_note":"","how_to_check":"- Run `mongorestore --version` and compare against the affected range\n- Look for restores of dumps from untrusted sources in your backup or restore scripts\n- List database users on the destination deployment for accounts you did not create","plain_action":"","needs_analyst":false,"not_affected_if":["trusted-dumps-only","no-user-management-credentials"],"who_is_affected":"Teams that run mongorestore against a MongoDB deployment using a dump they did not create themselves, with credentials that can manage users. Exposure depends on restoring untrusted data; restores of dumps you produced yourself are not the described path. unknown whether the sources cover other restore paths.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000682,"input_tokens":4223,"output_tokens":520,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-119675':13A,16A '-2026':12A,15A '100.20.1':166C '100.4.0':162C 'account':10A,70B,114C,117C 'admin':147C 'affect':157C 'alon':149C 'attack':55B 'behavior':154C 'bypass':35B,94C 'caus':103C 'choos':47B 'chosen':112C 'collect':25B,82C,91C,97C 'control':131C 'craft':24B,90C 'creat':6A,39B,107C 'credenti':134C 'cve':11A,14A 'data':132C 'databas':2A,9A,18B,30B,41B,67B,72C,113C,159C 'database-tool':17B 'deploy':144C 'destin':66B,143C 'dump':31B,59B,87C 'exclud':145C 'exploit':122C 'filter':102C 'guard':37B,98C 'handl':76C 'includ':48B,115C 'inconsist':75C 'issu':156C 'log':62B 'make':33B 'manag':139C 'mongodb':1A,20B,71C,158C 'mongorestor':4A,21B,34B,74C 'name':26B,83C,92C 'namespac':101C,148C 'one':49B 'oper':44B,100C,125C 'packag':22B 'prefix':79C 'prevent':152C 'privileg':140C 'requir':123C 'restor':105C,127C 'role':53B,121C 'root':8A,52B,120C 'special':89C,96C 'special-collect':95C 'suffici':136C 'suppli':57B 'system.buckets':78C 'tool':3A,19B,73C,160C 'unauthor':7A,109C,128C 'untrust':29B,86C 'use':133C 'user':42B,111C,130C,138C 'user-chosen':110C 'user-control':129C 'user-manag':137C 'valid':81C 'version':161C,164C","nicknames":[],"mitigations":[],"who_affected":"Teams that run mongorestore against a MongoDB deployment using a dump they did not create themselves, with credentials that can manage users. Exposure depends on restoring untrusted data; restores of dumps you produced yourself are not the described path. unknown whether the sources cover other restore paths.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"developers","plain_action":null,"pkeys":[],"ptokens":[],"labels":["databasetools","high","mongodb","mongorestore","package"],"campaign_type":null,"first_public_at":"2026-11-03T17:18:07+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@mongodb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119675","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119675","severity":null,"published_at":"2026-11-03T17:18:07+00:00","modified_at":"2026-11-03T17:18:07+00:00","first_seen_at":"2026-11-03T17:21:56+00:00","fetched_at":"2026-11-03T17:21:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}