CVE-2026-81524
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application incorporating untrusted input into these names can have operations directed at a resource other than intended.
Risk Assessment
This may lead to unauthorized access or modification of data in unintended collections or databases, compromising integrity and confidentiality.
Recommendation
Upgrade the MongoDB C Driver to a patched version. Validate and sanitize user-supplied database and collection names.
Original NVD description (English source)
A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have operations directed at a resource other than the one intended.