MongoDB Compass relies on Electron, which contains its own TLS root certificate store. At the time of this issue, the store included recoverable eMudhra intermediate CA certificates. This inclusion means that Compass will accept HTTPS certificates that chain up to the eMudhra CA, even if the CA has been compromised. The flaw is a TLS certificate validation error (CWE-295) that can undermine the authenticity of secure connections. Based on the description, it is inferred that an attacker holding a compromised eMudhra intermediate could generate a valid certificate for any domain, which Compass would trust, enabling man‑in‑the‑middle attacks on Compass traffic.

All installed versions of MongoDB Compass that embed Electron versions prior to 44.9.1 are affected, regardless of operating system. MongoDB, Inc. releases Compass for Windows, macOS, and Linux, and the vulnerability is present in every release before 1.53.1. Updating to Compass 1.53.1 or newer replaces Electron 44.9.1 and removes the recoverable eMudhra certificates from the root store, thereby mitigating the issue.

The CVSS score of 7.6 classifies the vulnerability as high severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is remote, with an attacker potentially using a compromised eMudhra intermediate to issue a trusted certificate for any domain. This could allow interception of Compass connections, credential theft, data tampering, or unauthorized data exfiltration. The real‑world risk depends on the compromise status of the eMudhra intermediate CA and the prevalence of its certificates in the broader trust ecosystem.