{"id":"CVE-2024-7553","summary":"Accessing Untrusted Directory May Allow Local Privilege Escalation","details":"Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB Server v5.0 versions prior to 5.0.27, MongoDB Server v6.0 versions prior to 6.0.16, MongoDB Server v7.0 versions prior to 7.0.12, MongoDB Server v7.3 versions prior 7.3.3, MongoDB C Driver versions prior to 1.26.2 and MongoDB PHP Driver versions prior to 1.18.1.\n\nRequired Configuration:\n\nOnly environments with Windows as the underlying operating system is affected by this issue","aliases":["BIT-mongodb-2024-7553"],"modified":"2026-08-12T14:52:24.205414Z","published":"2024-08-07T09:57:49.818Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"introduced":"5.0"},{"fixed":"5.0.27"},{"introduced":"6.0"},{"fixed":"6.0.16"},{"introduced":"7.0"},{"fixed":"7.0.12"},{"introduced":"7.3"},{"fixed":"7.3.3"},{"fixed":"1.26.2"},{"fixed":"1.18.1"}],"source":"AFFECTED_FIELD"}],"cna_assigner":"mongodb","cwe_ids":["CWE-284"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/7xxx/CVE-2024-7553.json"},"references":[{"type":"WEB","url":"https://jira.mongodb.org/browse/CDRIVER-5650"},{"type":"WEB","url":"https://jira.mongodb.org/browse/PHPC-2369"},{"type":"WEB","url":"https://jira.mongodb.org/browse/SERVER-93211"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/7xxx/CVE-2024-7553.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7553"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mongodb/mongo","events":[{"introduced":"1184f004a99660de6f5e745573419bda8a28c0e9"},{"fixed":"0a095119d792a0dc719fceb932267f4a33dd51e8"},{"introduced":"e61bf27c2f6a83fed36e5a13c008a32d563babe2"},{"fixed":"fc9c412204fdb4876f706cb62a45c1e98b5543fb"},{"introduced":"37d84072b5c5b9fd723db5fa133fb202ad2317f1"},{"fixed":"e1aa498db8bee013a82646b02f04ee878e0e4bbf"},{"introduced":"b4d4f7026332c345edc52f9687e509f74e95a0fb"},{"fixed":"23576ef75f59692926df6e8829a0f3addb384885"}],"database_specific":{"cpe":"cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"5.0.0"},{"fixed":"5.0.27"},{"introduced":"6.0.0"},{"fixed":"6.0.16"},{"introduced":"7.0.0"},{"fixed":"7.0.12"},{"introduced":"7.3.0"},{"fixed":"7.3.3"}],"source":"CPE_RANGE"}}],"versions":["r7.0.12-rc0","r7.0.11-rc2","r7.0.11","r7.0.11-rc1","r7.0.11-rc0","r7.0.10-rc0","r7.0.10","r7.3.2-rc1","r7.3.2","r7.0.9-rc1","r7.0.9","r7.3.2-rc0","r7.0.9-rc0","r6.0.15-rc0","r6.0.15","r7.0.8-rc0","r7.0.8","r7.3.1-rc2","r7.3.1","r7.3.1-rc1","r7.3.1-rc0","r7.3.0","r5.0.26-rc0","r5.0.26","r7.0.7-rc2","r7.0.7","r7.0.7-rc1","r7.0.7-rc0","r5.0.25-rc0","r5.0.25","r6.0.14-rc1","r6.0.14","r7.0.6-rc0","r7.0.6","r6.0.14-rc0","r5.0.24-rc0","r5.0.24","r6.0.13-rc0","r6.0.13","r7.0.5-rc0","r7.0.5","r6.0.12-rc1","r6.0.12","r5.0.23-rc0","r5.0.23","r7.0.4-rc0","r7.0.4","r6.0.12-rc0","r5.0.22-rc1","r5.0.22","r7.0.3-rc1","r7.0.3","r7.0.3-rc0","r5.0.22-rc0","r6.0.11-rc0","r6.0.11","r7.0.2-rc2","r7.0.2","r7.0.2-rc1","r7.0.2-rc0","r5.0.21-rc0","r5.0.21","r6.0.10-rc0","r6.0.10","r7.0.1-rc0","r7.0.1","r7.0.0","r6.0.9-rc1","r6.0.9","r5.0.20-rc1","r5.0.20","r5.0.20-rc0","r6.0.9-rc0","r5.0.19-rc0","r5.0.19","r6.0.8-rc0","r6.0.8","r6.0.7-rc0","r6.0.7","r5.0.18-rc2","r5.0.18","r5.0.18-rc1","r5.0.18-rc0","r6.0.6-rc1","r6.0.6","r6.0.6-rc0","r5.0.17-rc0","r5.0.17","r5.0.16-rc0","r5.0.16","r6.0.5-rc1","r6.0.5","r6.0.5-rc0","r6.0.4-rc1","r5.0.15-rc2","r5.0.15","r5.0.15-rc1","r5.0.15-rc0","r6.0.4-rc0","r6.0.4","r5.0.14-rc0","r5.0.14","r6.0.3-rc2","r6.0.3-rc1","r6.0.3","r6.0.3-rc0","r6.0.2-rc1","r6.0.2","r5.0.13-rc0","r5.0.13","r5.0.12-rc0","r5.0.12","r6.0.2-rc0","r5.0.11-rc1","r5.0.11","r5.0.11-rc0","r6.0.1-rc0","r6.0.1","r5.0.10-rc0","r5.0.10","r6.0.0","r5.0.9-rc1","r5.0.9","r5.0.9-rc0","r5.0.8-rc0","r5.0.8","r5.0.7-rc1","r5.0.7","r5.0.7-rc0","r5.0.6-rc2","r5.0.6","r5.0.6-rc1","r5.0.6-rc0","r5.0.5-rc0","r5.0.5","r5.0.4-rc0","r5.0.4","r5.0.3-rc2","r5.0.3","r5.0.3-rc1","r5.0.3-rc0","r5.0.2-rc0","r5.0.2","r5.0.1-rc0","r5.0.1","r5.0.0"],"database_specific":{"vanir_signatures_modified":"2026-08-12T14:52:24Z","vanir_signatures":[{"target":{"file":"src/mongo/db/catalog/validate_adaptor.cpp"},"deprecated":false,"digest":{"line_hashes":["329913852977053609459348688876833772491","27916421123273442154788625867936558300","254702237974878015461965003870539828486","69421658026751040608409740480749280563","59917524354465280083159754591568849064","118018153581426355201273610055412648538","202532364772967976656763415643466941211","47734924488772846956200476706272185238","161212334903003241711487295786793226842","244456038624490861842252424110816638544","322863289751779914270480716810515554130","210052204172846521702750367235445809096","134110601181299761084451138273808492779","20805998714756534432480840491877179793","198655128569990713992246152435318790910","68737470364433947102250526007507987068","193141080203447453096678275169688079311","274647368727423873631935008094415250900","6268980372646714086915409820431349257","84984221224533540388982641104063897055","55005143038296249055982544406153960039","197818085694772290256155776757570881861","325037879151098428754255884609382879360","221619187051515016168802315609371653260","120466451140107615920068057742060470260","180553256761516972613130832338620776690","242805896369546415456463004820945610401","25479116213114791816244574489579503173","301856799049377450880407501137723803495","293097896970528646890797003707406205470","89033067201110874503040566667736809461","80679747684782025787908739992128731839","300319027487364620971993600040520359164","134632868906332286542540803647382438968","255774180792678301400293503718771711460","40787414203996703021934373762299843031","332243771555207044190096874014908344315","236909820442148586509339669249705154549","154384632052279004074215527500682061602","233611330147428695231606866826892012747","247411118473579998750781502684875537232","106483436017133997274245817681143584591","182970895451744785784745563594047291081","147768537146537731830905577488937472841","297181038508343489747653048707178530232","31960323565502150100950393037137472491","141035720272936282041387270664732570818","72377435735075893685270530673520870212","336060587749944256689127264340034840781"],"threshold":0.9},"id":"CVE-2024-7553-02994c0e","signature_type":"Line","signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/fc9c412204fdb4876f706cb62a45c1e98b5543fb"},{"deprecated":false,"digest":{"line_hashes":["1770885869270750480141319907863994746","19520909800484761539646821662919742939","216726665403661884986091132459081168134","304935351436049255276440523825985770317","153380889861364499314029019562908192937","164186630264173411481843701519291681473","284208359225685349437689824140631392636"],"threshold":0.9},"id":"CVE-2024-7553-0e081e84","signature_type":"Line","signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/fc9c412204fdb4876f706cb62a45c1e98b5543fb","target":{"file":"src/mongo/dbtests/validate_tests.cpp"}},{"source":"https://github.com/mongodb/mongo/commit/fc9c412204fdb4876f706cb62a45c1e98b5543fb","target":{"file":"src/mongo/db/catalog/validate_adaptor.cpp","function":"ValidateAdaptor::traverseIndex"},"deprecated":false,"digest":{"function_hash":"102081938924117680613651894140190709282","length":5100},"id":"CVE-2024-7553-61a1ae8a","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["314654536095043183637371322138239410638","174735725970083152049936852950523398986","80631528736024170706229284856256956231","1466669372744118300558502035314136441"],"threshold":0.9},"id":"CVE-2024-7553-6af3ced8","signature_type":"Line","signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/0a095119d792a0dc719fceb932267f4a33dd51e8","target":{"file":"src/mongo/db/concurrency/lock_state.h"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/mongodb/mongo/commit/fc9c412204fdb4876f706cb62a45c1e98b5543fb","target":{"file":"src/mongo/db/catalog/validate_adaptor.cpp","function":"_validateKeyOrder"},"deprecated":false,"digest":{"function_hash":"274673260755196232339555212731228073531","length":1161},"id":"CVE-2024-7553-9b563fd2"}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-7553.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/mongodb/mongo-c-driver","events":[{"introduced":"0"},{"fixed":"586171d661f584d841bdc32fc998e9f6cf903228"}],"database_specific":{"cpe":"cpe:2.3:a:mongodb:c_driver:*:*:*:*:*:mongodb:*:*","extracted_events":[{"introduced":"0"},{"fixed":"1.26.2"}],"source":"CPE_RANGE"}}],"versions":["1.26.1","1.26.0","1.11.0","1.9.0-rc1","1.9.0-rc0","1.7.0-rc0","1.6.0","1.6.0-rc0","1.5.0-rc4","1.5.0-rc3","1.5.0-rc2","1.5.0-rc1","1.5.0-rc0","1.4.0-beta1","1.3.0","1.3.0-rc0","1.1.11","1.1.10","1.1.9","1.1.8","1.1.7","1.1.6","1.1.5","1.1.4","1.1.2","1.1.0","1.1.0-rc0","1.0.2","1.0.0","0.98.2","0.98.0","0.96.4","0.96.0","0.94.2","0.94.0","0.92.2","0.92.0","0.90.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-7553.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/mongodb/mongo-php-driver","events":[{"introduced":"0"},{"fixed":"451fec46cb4854ece7f791b75ae22ba2e62839db"}],"database_specific":{"cpe":"cpe:2.3:a:mongodb:php_driver:*:*:*:*:*:mongodb:*:*","extracted_events":[{"introduced":"0"},{"fixed":"1.18.1"}],"source":"CPE_RANGE"}}],"versions":["1.18.0","1.17.0","1.15.0","1.14.0","1.14.0beta1","1.13.0","1.12.0","1.11.0","1.11.0alpha1","1.10.0alpha1","1.6.0RC1","1.6.0alpha3","1.6.0alpha2","1.6.0alpha1","1.5.0","1.4.0RC1","1.4.0beta1","1.3.1","1.3.0","1.3.0RC1","1.3.0beta2","1.3.0beta1","1.2.3","1.2.2","1.2.1","1.2.0","1.2.0alpha3","1.2.0alpha2","1.2.0alpha1","1.1.4","1.1.3","1.1.2","1.1.1","1.1.0","1.0.0","1.0.0RC0","1.0.0beta2","1.0.0beta1","1.0.0alpha2","1.0.0alpha1","0.6.3","0.6.2","0.6.1","0.6.0","0.5.1","0.5.0","0.4.1","0.4.0","0.3.1","0.3.0","0.2.0","0.1.5","0.1.4","0.1.3","0.1.2","0.1.1","0.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-7553.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"}]}