
CVE-2025-14847 | MongoBleed vulnerability proof of concept project
CVE-2025–14847, also known as MongoBleed, is a vulnerability that allows attackers to perform unauthorized data reads from the heap memory space of the server on which the MongoDB database runs, without authentication.
podman-compose vuln-machine/ up -d
python3 -m venv venv && source venv/bin/activate
python3 exploit.py
CVE-2025-14847 tool has been developed for testing and learning purposes and should not be used for illegal activities under any circumstances. PeakCyber is not responsible in any way for actions performed with the tool.