CVE-2025-14847 (MongoBleed): MongoDB Memory Leak Vulnerability Exploited in the Wild

CVE-2025-14847, dubbed MongoBleed, is a memory leak vulnerability affecting MongoDB instances with zlib compression enabled. The flaw allows unauthenticated attackers to leak uninitialized memory containing sensitive data like credentials, session tokens, and API keys. Over 87,000 potentially vulnerable MongoDB instances have been identified globally. The vulnerability is actively exploited in the wild with public proof-of-concept code available on GitHub. MongoDB has released patches for all affected versions from 3.6 through 8.2. Immediate patching is strongly recommended due to active exploitation and widespread exposure of vulnerable instances.