Skip to content
OpenAdvisories
High WID-SEC-2026-3066 12 CVEs

MongoDB Clients: Mehrere Schwachstellen

Published Aug 27, 2026 · Updated Sep 16, 2026 · Revision 5 · de-DE

Vendor: Fedora Vendor: Red Hat Vendor: SUSE Product: Enterprise Linux Product: Linux Product: openSUSE Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in verschiedenen MongoDB Clients ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren oder Denial-of-Service-Zustände herbeizuführen.

Product

MongoDB ist ein Open-Source-Dokumentendatenbank.

Vulnerabilities 12

  • High 8.1
    CVE-2026-81522

    Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C++ Driver

    A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embedded in those identifiers. An application that builds a namespace identifier from untrusted input without validating it may therefore have i…

    MongoDB C Driver mongo-cxx-driver mongo-cxx-driver Debian Ubuntu
  • High 8.1
    CVE-2026-81525

    Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver

    The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace identifiers before using them to construct the target namespace for database operations. An application that incorporates untrusted text into …

    MongoDB PHP Extension PHP Library php-mongodb Debian Ubuntu Packagist
  • High 7.1
    CVE-2026-81529

    Connection-option injection via unescaped settings in the canonical MongoDB URL builder

    Improper neutralization of delimiters in connection-URL construction allows connection-option injection in the MongoDB C# Driver. When an application passes untrusted text into the driver's connection-URL builder and round-trips the builder back into a client…

    MongoDB C Driver
  • Medium 6.5
    CVE-2026-81521

    Cross-database write retargeting via unvalidated dotted database name in Client.BulkWrite in the MongoDB Go Driver

    The MongoDB Go Driver's client-level bulk write operation may accept a caller-supplied database name containing a reserved separator character without escaping it before the name is used to build the target namespace for the operation. An application that pas…

    MongoDB GO Driver golang-mongodb-mongo-driver golang-mongodb-mongo-driver Debian Ubuntu
  • Medium 6.5
    CVE-2026-81526

    Cross-database write redirection via unvalidated dotted database name in bulk write namespaces

    The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in the request it sends to the server. An actor able to influence that identifier in an application using the driver may cause write oper…

    MongoDB Rust Driver
  • Medium 6.5
    CVE-2026-81527

    NoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translation

    A NoSQL/expression injection weakness exists in the LINQ-to-aggregation query translation layer of the MongoDB C# Driver, in both aggregation expression and query filter translation. When application-supplied values are embedded in certain query constructs, s…

    MongoDB C Driver
  • Medium 5.9
    CVE-2026-75159

    MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination

    An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can inte…

    MongoDB BI Connector
  • Medium 5.6
    CVE-2026-81530

    KMS master key exposure via unredacted credential serialization in driver settings string

    A weakness in the client-side encryption configuration surface of the MongoDB C# Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its c…

    MongoDB C Driver
  • Medium 5.4
    CVE-2026-81524

    Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver

    A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input…

    MongoDB C Driver mongo-c-driver mongo-c-driver Debian Ubuntu Alpine
  • Medium 5.4
    CVE-2026-81528

    NoSQL injection via array replacement bypassing update shape validation in driver write path

    A MongoDB C# driver document-replacement code path omits the element-name/shape validation that the equivalent write paths apply, so a value supplied as a replacement is forwarded to the server without neutralization of query-language special elements. An app…

    MongoDB C Driver
  • Medium 4.4
    CVE-2026-75573

    MongoDB Connector for BI mongodrdl Logs TLS Private-Key Password When Duplicate Options Are Supplied

    In MongoDB Connector for BI, mongodrdl may write a TLS private-key password to standard error when the password is supplied through both the connection URI and the corresponding command-line option. A local user with access to the captured command output and …

    MongoDB BI Connector
  • Medium 4.4
    CVE-2026-81523

    Cross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocrypt

    A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitization. The resulting impact is limited to incorrect schema selection, which may lead to l…

    MongoDB libmongocrypt libmongocrypt libmongocrypt Debian Ubuntu

Revision history

  1. #5

    Neue Updates von Red Hat aufgenommen

  2. #4

    Neue Updates von openSUSE aufgenommen

  3. #3

    Neue Updates von Fedora aufgenommen

  4. #2

    Neue Updates von Fedora aufgenommen

  5. #1

    Initiale Fassung

References