MONGODB MongoDB Compass

• CVE-2026-14881 High 7.8 Compass connection import allows to override OIDC browser open command (usually set through settings), allowing for arbitrary shell commands execution when connecting to cluster using OIDC auth flow 0.2%