MongoDB bug bounty programs
mongodb.com Updated
MongoDB runs 4 public programs on Sorona, HackerOne and its own site; 4 pay cash, the most up to $8,500 (MongoDB).
- Top reward
- $8,500
- HackerOne
- Programs
- 4
- 4 pay cash
- Targets in scope
- 51
- 4 types, deduplicated
- Last change
- 30 Sep 2026
- 1 month ago
Where to report
4 programs, side by side. Report where the affected target is in scope; when two programs cover it, pick the one that pays more.
Start here
MongoDB
HackerOne · Pays the most of the 4 programs: up to $8,500.
| Program | Critical | High | Medium | Low | Top reward | Safe harbor | KYC | First response | Status |
|---|---|---|---|---|---|---|---|---|---|
MongoDB
HackerOne · Bug bounty |
$8,500 (highest) | $3,500 | $500 | $100 | $8,500 | Full | – | 2 hours average | Open |
|
MongoDB MCP Server
Sorona · Bug bounty |
$8,500 | $3,750 (highest) | $625 (highest) | $125 (highest) | $8,500 | Partial | – | 24 hours promised | Open |
|
MongoDB
Sorona · Bug bounty |
– | – | – | – | $7,500 | Partial | – | – | Open |
|
MongoDB
Self-hosted · Bug bounty |
– | – | – | – | Not published | Partial | – | – | Open |
-
- Critical
- $8,500 (highest)
- High
- $3,500
- Medium
- $500
- Low
- $100
- Safe harbor
- Full
- First response
- 2 hours average
-
- Critical
- $8,500
- High
- $3,750 (highest)
- Medium
- $625 (highest)
- Low
- $125 (highest)
- Safe harbor
- Partial
- First response
- 24 hours promised
-
- Safe harbor
- Partial
-
- Safe harbor
- Partial
Amounts are the top reward per severity in the currency each program pays. Green marks the highest per severity. First response is the platform's measured average when it publishes one, else what the policy promises.
What is in scope
51 targets across all 4 programs, each listed once with the programs that cover it. 13 excluded.
-
Atlas identity and access management at account.mongodb.com, organizations, projects, and permission-boundary bugs (up to Critical), together with Atlas Charts (charts.mongodb.com) and Atlas Payments/Billing
Products and areas
Covered by MongoDB
-
Client tooling: Compass (the GUI), the mongosh shell, the mongosync cluster-to-cluster sync utility, and the downloadable Database Tools (all up to Critical)
Products and areas
Covered by MongoDB
-
Configuration loading from command-line flags, environment variables and config files, including how connection strings and Atlas credentials get in
Products and areas
Covered by MongoDB MCP Server
-
Connection-string and credential handling once loaded: storage in memory, reuse across sessions, and anywhere a live connection string or Atlas API key can be read back, logged, or returned to the model
Products and areas
Covered by MongoDB MCP Server
-
Connectors and IDE plugins: the Kafka, PowerBI, BI, Spark, and Tableau connectors, the VS Code plugin (mongodb.mongodb-vscode), the JetBrains IntelliJ plugin, and Relational Migrator (up to Critical)
Products and areas
Covered by MongoDB
-
MongoDB Atlas Agent Engine CLI and First Party Libraries
Products and areas Critical
Covered by HackerOne
-
MongoDB Atlas, the multi-cloud database platform (up to Critical), its Clusters, Streams, Online Archive, Backup, and Data Federation surfaces, all testable on a Free Tier Atlas account
Products and areas
Covered by MongoDB
-
MongoDB gives this repository an asset of its own. The structured scope MongoDB MCP Server is eligible for bounty with no severity override, and its entire instruction is the URL https://github.com/mongodb-js/mongodb-mcp-server, so the program's single reward row applies in full at $100 for Low up to $7,500 for Critical
Products and areas
Covered by MongoDB MCP Server
-
MongoDB-owned web properties under *.mongodb.com (up to Critical), and the production Evergreen CI system at github.com/evergreen-ci/evergreen excluding its staging endpoints
Products and areas
Covered by MongoDB
-
Public Jira projects, but only for information-disclosure findings, technical bugs filed there are not accepted
Products and areas
Covered by MongoDB
-
Query, filter and aggregation construction from model-supplied arguments, where an injected operator or pipeline stage reaches the driver with more authority than intended
Products and areas
Covered by MongoDB MCP Server
-
Telemetry and logging: what leaves the host, and what is written where another local process can read it
Products and areas
Covered by MongoDB MCP Server
-
The Atlas management tool set covering projects, clusters, network access lists and database users, which reaches an Atlas organisation with cluster-management rights
Products and areas
Covered by MongoDB MCP Server
-
The database tool set: find, aggregate, count, insert, update, delete, index, schema and the collection and database management tools, together with the arguments each accepts from the model
Products and areas
Covered by MongoDB MCP Server
-
The MongoDB Community and Enterprise servers (mongod) and their query, storage, and replication engines, plus Cloud Manager, Ops Manager, Search, and the Kubernetes Operators (up to Critical)
Products and areas
Covered by MongoDB
-
The MongoDB MCP Server (github.com/mongodb-js/mongodb-mcp-server) and the MongoDB Assistant AI, which is embedded in Data Explorer and Compass (up to Critical)
Products and areas
Covered by MongoDB
-
The official drivers rated up to Critical, Atlas SQL JDBC and ODBC, C, C++, Go, the JVM family (Java/Scala/Kotlin), Libmongocrypt, Node.js/TypeScript, PHP, Python, Ruby, and Rust (the Swift driver is not in scope)
Products and areas
Covered by MongoDB
-
The server's transports and session handling, both the stdio mode an agent spawns locally and the HTTP mode it connects to over a network
Products and areas
Covered by MongoDB MCP Server
-
Tool definitions and their schema validation, the boundary that decides what an untrusted prompt can ultimately cause the server to execute
Products and areas
Covered by MongoDB MCP Server
-
Tool-level authorisation and the guards around it: read-only mode, the disabled-tools list, index checks, and the confirmation gates on destructive operations
Products and areas
Covered by MongoDB MCP Server
No target matches. Try part of a host name, such as the company name.
Out of scope 13
Don't test these. A program can exclude a host another program covers; the program you report to decides.
-
Assets that are in scope but not bounty-eligible: App Services/Realm (deprecated), the MongoDB Toolchain, learn.mongodb.com (University, third-party owned), and MongoDB repos outside github.com/mongodb
MongoDB
-
Best-practice and configuration findings, missing HSTS/CSP, cookie flags, SPF/DKIM/DMARC email issues, banner/version disclosure, and verbose error messages
MongoDB
-
Denial-of-service and service-disruption activity, and rate-limiting reports on non-authentication endpoints
MongoDB
-
Duplicate reports sharing a root cause with an existing submission
MongoDB MCP Server
-
Explicitly out-of-scope targets: voyageai.com, feedback.mongodb.com (route to AHA), the Artifactory instance being deprecated, all Evergreen staging endpoints, and the Swift driver
MongoDB
-
Low-impact web noise: clickjacking on pages with no sensitive action, CSRF on unauthenticated or non-sensitive forms, logout CSRF, open redirects with no added impact, tabnabbing, and content spoofing without HTML/CSS injection
MongoDB
-
MITM- or physical-access-dependent attacks, subdomain takeovers on out-of-scope domains, and known vulnerable libraries submitted without a working PoC
MongoDB
-
MongoDB's community forums at mongodb.com/community/forums, which the program asks researchers not to test at all
MongoDB MCP Server
-
MongoDB's published known false positives, including SCRAM-SHA1 credential disclosure, server version disclosure, missing X-Frame-Options on developer.mongodb.com, and the Host-header open redirect
MongoDB
-
MongoDB-owned repositories outside github.com/mongodb other than this one, which are in scope for submission but not eligible for bounty
MongoDB MCP Server
-
Non-technical Jira reports and findings with no demonstrated technical impact
MongoDB MCP Server
-
The Model Context Protocol SDK and the other npm dependencies the server builds on, which belong to their own projects
MongoDB MCP Server
-
The MongoDB server, the drivers and the Atlas service itself, which are separate assets on the same program rather than part of this scope
MongoDB MCP Server
Recent changes
Reward and scope changes across every MongoDB program, newest first.
-
Raised HackerOne
Top reward $7,500 to $8,500.
Recent CVEs
Published vulnerabilities in MongoDB products, from the NVD.
-
CVE-2026-87110 Medium
An unauthenticated user with network access to the Ops Manager web port can repeatedly request monitoring endpoints that perform costly work without rate limiting. This can temporarily slow other traffic served by the same process while requests continue.
-
CVE-2026-87108 Low
An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration details.
-
CVE-2026-87109 Medium
An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed through user-listing endpoints while that member's enrollment is unconfirmed. This results in disclosure of secret authentication material to another member of the same organization or project.
-
CVE-2026-87110 Medium
An unauthenticated user with network access to the Ops Manager web port can repeatedly request monitoring endpoints that perform costly work without rate limiting. This can temporarily slow other traffic served by the same process while requests continue.
-
CVE-2026-87109 Medium
An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed through user-listing endpoints while that member's enrollment is unconfirmed. This results in disclosure of secret authentication material to another member of the same organization or project.
-
CVE-2026-87108 Low
An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration details.
-
CVE-2026-87108 Low
An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration details.
-
CVE-2026-87109 Medium
An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed through user-listing endpoints while that member's enrollment is unconfirmed. This results in disclosure of secret authentication material to another member of the same organization or project.
About this page
This page gathers every public program listed under mongodb.com: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.
Something wrong or missing? Report a correction.