CVE-2026-81522
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embedded in those identifiers. An application that builds a namespace identifier from untrusted input without validating it may have its operation directed at a different target than intended.
Risk Assessment
This can result in limited unauthorized read and write access to data belonging to another logical tenant of the affected application, breaking data isolation.
Recommendation
Validate namespace identifiers before use and update the driver to a patched version.
Original NVD description (English source)
A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embedded in those identifiers. An application that builds a namespace identifier from untrusted input without validating it may therefore have its operation directed at a different target than intended. This can result in limited unauthorized read and write access to data belonging to another logical tenant of the affected application.