MongoDB Database Tools (< 100.20.1)

A vulnerability in the mongorestore utility allows an attacker to bypass namespace validation by leveraging crafted system.buckets collection names, potentially resulting in unauthorized administrative account creation when run by a privileged operator.