Vulnerability in MongoDB C++ Driver
CVE-2026-81522
A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embedded in those identifiers. An application that builds a namespace identifier from untrusted input without validating it may therefore have its operation directed at a different target than intended. This can result in limited unauthorized read and write access to data belonging to another logical tenant of the affected application.
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.
Affected products
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-81522?
- CVE-2026-81522 is a high-severity vulnerability in MongoDB C++ Driver, classified under Improper Encoding or Escaping of Output. CVSS score: 8.1/10. Published 2026-08-27.
- How severe is CVE-2026-81522?
- High severity. CVSS v3 base score is 8.1 out of 10.