Back to today’s briefing

Story perspectives

MongoDB Urges Immediate Upgrades: Critical Vulnerability Disclosed

12/24/2025

26 4

Summary

Story summary

MongoDB has disclosed a critical vulnerability, CVE-2025-14847, affecting versions 3.6 through 8.2.3.
The flaw lets unauthorized clients read uninitialized memory from server memory due to zlib's data compression handling.
MongoDB has released patches, urges users to upgrade immediately, and organizations should audit deployments promptly.
For those unable to upgrade, disabling zlib compression is a temporary workaround.

1 of 1

Story summary

MongoDB has disclosed a critical vulnerability, CVE-2025-14847, affecting versions 3.6 through 8.2.3.
The flaw lets unauthorized clients read uninitialized memory from server memory due to zlib's data compression handling.
MongoDB has released patches, urges users to upgrade immediately, and organizations should audit deployments promptly.
For those unable to upgrade, disabling zlib compression is a temporary workaround.