FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

MongoDB -- Race condition in privilege cache invalidation cycle

Affected packages
mongodb50 < 5.0.31
mongodb60 < 6.0.24
mongodb70 < 7.0.21
mongodb80 < 8.0.5

Details

VuXML ID 5cd2bd2b-52aa-11f0-b522-b42e991fc52e
Discovery 2025-06-26
Entry 2025-06-26

NVD reports:

Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator.

References

CVE Name CVE-2025-6707
URL https://nvd.nist.gov/vuln/detail/CVE-2025-6707