Skip to content
OpenAdvisories

Product · MongoDB

Rust Driver

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-120673

    Rust Driver 3.9.1 exports CSFLE plaintext in `db.query.text` before encrypting the command

    A component of the MongoDB Rust Driver that records diagnostic tracing data can capture command content before automatic client-side field level encryption is applied. In deployments that turn on the optional tracing capability together with automatic in-use …

    MongoDB Rust Driver
  • Medium 6.5
    CVE-2026-81526

    Cross-database write redirection via unvalidated dotted database name in bulk write namespaces

    The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in the request it sends to the server. An actor able to influence that identifier in an application using the driver may cause write oper…

    MongoDB Rust Driver