Vulnerability in MongoDB C Driver

CVE-2026-81524

A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have operations directed at a resource other than the one intended.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-81524?
CVE-2026-81524 is a medium-severity vulnerability in MongoDB C Driver, classified under Resource Injection. CVSS score: 5.4/10. Published 2026-08-27.
How severe is CVE-2026-81524?
Medium severity. CVSS v3 base score is 5.4 out of 10.