Wingetlywingetly
← All apps

MongoDB Shell

by MongoDB Inc.v2.9.2

Last updated

The mongo shell is an interactive JavaScript interface to MongoDB.

Visit homepage

Install with winget

$ winget install --id MongoDB.Shell --exact --version 2.9.2

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Silent install command for MongoDB Shell

MongoDB Shell uses MSI (WiX). The silent install switches are /quiet /norestart.

One-line silent install (x64, machine scope)
msiexec.exe /i mongosh-2.9.2-x64.msi /quiet /norestart

See the full silent install reference for MongoDB Shell →

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

No credit card required.

About

The mongo shell is an interactive JavaScript interface to MongoDB. You can use the mongo shell to query and update data as well as perform administrative operations.

Installers · v2.9.2

ArchitectureTypeScopeInstallDownload
x64MSI
WiX
machineDirect

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

25 known CVEs via NVD

  • medium4.3Patched in wingetCVE-2026-84967affects before 1.17.1Sep 3, 2026

    A component of the MongoDB extension for Visual Studio Code does not neutralize special characters in a connection string before that value is placed into a command line the extension composes for an integrated terminal. An unauthenticated remote unauthorized-user who persuades...

  • medium5.5Patched in wingetCVE-2026-9751affects before 7.0.35, 8.0.24, 8.2.10, 8.3.3Jun 9, 2026

    The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text.

    Vendor advisory
  • medium6.5Patched in wingetCVE-2026-9750affects before 7.0.35, 8.0.24, 8.2.10, 8.3.3Jun 9, 2026

    An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metad...

    Vendor advisory
  • medium6.5Patched in wingetCVE-2026-9748affects before 7.0.35, 8.0.10, 8.2.10, 8.3.3Jun 9, 2026

    The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this document" when an index stats conversion failed. But PauseExecution is not a general purpose skip mechanism, but rather a TeeBuffer-internal signal used solely by $facet to coordinate i...

    Vendor advisory
  • medium6.5Patched in wingetCVE-2026-9747affects before 7.0.35, 8.0.24, 8.2.10, 8.3.3Jun 9, 2026

    Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server.

    Vendor advisory
  • medium6.5Patched in wingetCVE-2026-9743affects before 8.0.24Jun 9, 2026

    In MongoDB Server 8.0, an aggregation stage can leave its _subPipeline field null during processing of certain pipelines. If a getMore is subsequently issued on the same cursor, the server may dereference this null sub-pipeline when reattaching to the operation context, accessin...

    Vendor advisory
  • high7.5Patched in wingetCVE-2026-9740affects before 7.0.35, 8.0.24, 8.2.10, 8.3.3Jun 9, 2026

    A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash the mongod process by sending a specially crafted message. The BSON validator's handling of certain nested binary data structures permits uncontrolled mutual recursion between valid...

    Vendor advisory
  • medium5.5Patched in wingetCVE-2026-9735affects before 8.3.3Jun 9, 2026

    MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication. When connection health metric logging is enabled, the full authentication parameters are written to the log without redaction.

    Vendor advisory
Showing 8 of 25. Source: NVD, updated 3h ago. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr - automated patching is the only way to keep up.

Related apps

  • MongoDBMongoDB Inc.
    MongoDB.Serverv8.3.7

    MongoDB is a general purpose, document-based, distributed database built for modern application developers and for the cloud era.

  • MongoDB ToolsMongoDB Inc.
    MongoDB.DatabaseToolsv100.18.0

    The MongoDB Database Tools are a collection of command-line utilities for working with a MongoDB deployment.

  • PowerShellMicrosoft Corporation
    Microsoft.PowerShellv7.6.6.0

    PowerShell is a cross-platform task automation solution made up of a command-line shell, a scripting language, and a configuration management framework. PowerShell runs on Windows, Linux, and macOS.

  • PostgreSQL 10PostgreSQL Global Development Group
    PostgreSQL.PostgreSQL.10v10

    The World's Most Advanced Open Source Relational Database

  • XTerminalXterminal
    JiLuo.Xterminalv5.8.6

    更好用的开发工具，但不止于 SSH/控制台/More

  • PostgreSQL 17PostgreSQL Global Development Group
    PostgreSQL.PostgreSQL.17v17.11-3

    The World's Most Advanced Open Source Relational Database

More from MongoDB Inc. or browse db, mongo, mongodb.

Frequently asked questions

How do I install MongoDB Shell on Windows?
Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id MongoDB.Shell --exact --version 2.9.2. winget downloads the installer from MongoDB Inc. and runs it. Requires Windows 10 (1809+) or Windows 11.
How do I install MongoDB Shell silently for unattended deployment?
Add --silent and accept the agreements upfront: winget install --id MongoDB.Shell --exact 2.9.2 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.
What are the silent install switches for MongoDB Shell?
MongoDB Shell uses MSI (WiX). Run the downloaded installer with: msiexec.exe /i mongosh-2.9.2-x64.msi /quiet /norestart. The silent switches are /quiet /norestart.
How do I uninstall MongoDB Shell via winget?
Run: winget uninstall --id MongoDB.Shell --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from MongoDB Shell's Apps & Features entry.
Is MongoDB Shell free?
MongoDB Shell is distributed under Apache License 2.0. Refer to the publisher (https://www.mongodb.com/products/shell) for the full license terms - Wingetly itself does not charge for installation.
Does MongoDB Shell work on Windows 10?
Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls MongoDB Shell directly from the publisher.
How do I keep MongoDB Shell up to date?
Run winget upgrade --id MongoDB.Shell --exact, or winget upgrade --all to update everything winget tracks. We index 10 versions of MongoDB Shell from microsoft/winget-pkgs.

Recent versions

  • 2.9.2latest
  • 2.9.1
  • 2.9.0
  • 2.8.3
  • 2.8.2
  • 2.8.1
  • 2.7.0
  • 2.6.0
  • 2.5.10
  • 2.5.9