CVE-2026-81523

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-81523
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-81523.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-81523
Downstream
Published
2026-08-27T18:32:24.206Z
Modified
2026-08-30T03:30:44.279898405Z
Severity
  • 2.0 (Low) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
Cross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocrypt
Details

A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitization. The resulting impact is limited to incorrect schema selection, which may lead to limited disclosure or modification of information handled by the application.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/81xxx/CVE-2026-81523.json",
    "cwe_ids": [
        "CWE-74"
    ],
    "cna_assigner": "mongodb"
}
References

Affected packages

Git / github.com/mongodb/libmongocrypt

Affected ranges

Type
GIT
Repo
https://github.com/mongodb/libmongocrypt
Events
Introduced
db663b458b8680df9b81ff8cde7053633c155fb6
Fixed
f12c437858d25a06d55e0a14433d39ef3aa862f4
Database specific
Show details 
{
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "1.0.0"
        },
        {
            "fixed": "1.20.3"
        }
    ]
}

Affected versions

1.*
1.0.1
1.0.1-rc0
1.0.2
1.0.3
1.0.4
1.1.0
1.1.0-beta1
1.10.0b0
1.10.0b1
1.2.0
1.2.1
1.2.2
1.20.0
1.20.1
1.20.2
1.3.0
1.3.0-beta1
1.3.1
1.4.0-alpha0
1.5.0-alpha0
1.5.0-alpha1
1.5.0-alpha2
1.5.0-rc0
1.5.0-rc1
1.5.0-rc2
1.6.0-alpha0
1.7.0-alpha0
1.7.0-alpha1
1.7.0-alpha2
1.8.0-alpha0
1.8.0-alpha1
csharp-v1.*
csharp-v1.1.0-beta01
csharp-v1.1.0-beta02
csharp-v1.1.0-beta03
csharp-v1.1.0-beta04
csharp-v1.10.0
csharp-v1.11.0
csharp-v1.2.0
csharp-v1.2.1
csharp-v1.2.2
csharp-v1.2.3
csharp-v1.3.0
csharp-v1.5.0
csharp-v1.5.1
csharp-v1.5.2
csharp-v1.5.4
csharp-v1.5.5
csharp-v1.6.0
csharp-v1.7.0
csharp-v1.8.0
csharp-v1.8.0-alpha.0
csharp-v1.8.1
csharp-v1.8.2
csharp-v1.9.0
debian/1.*
debian/1.1.0-1
java-1.*
java-1.11.0
java-1.6.0-alpha0
java-1.8.0-alpha0
node-v1.*
node-v1.0.0
node-v1.0.1
node-v1.1.0
node-v1.2.0
node-v1.2.1
node-v1.2.2
node-v1.2.3
node-v1.2.4
node-v1.2.5
node-v1.2.6
node-v1.2.7
node-v2.*
node-v2.0.0
node-v2.0.0-beta.0
node-v2.0.0-beta.3
node-v2.0.0-beta.4
node-v2.1.0
node-v2.2.0
node-v2.2.0-alpha.0
node-v2.2.0-alpha.1
node-v2.2.0-alpha.2
node-v2.2.0-alpha.3
node-v2.2.0-alpha.4
node-v2.2.0-alpha.5
node-v2.2.0-alpha.6
node-v2.2.1
node-v2.3.0
node-v2.4.0
node-v2.4.0-alpha.0
node-v2.4.0-alpha.1
node-v2.4.0-alpha.2
node-v2.5.0
node-v2.6.0
node-v2.6.0-alpha.0
node-v2.7.0
node-v2.7.0-alpha.0
node-v2.7.1
node-v2.8.0
node-v2.8.0-alpha.0
node-v2.9.0
node-v6.*
node-v6.0.0
node-v6.0.0-alpha.2
node-v6.0.0-alpha.3
node-v6.0.1
pymongocrypt-1.*
pymongocrypt-1.0.0
pymongocrypt-1.0.1
pymongocrypt-1.1.0
pymongocrypt-1.1.0b0
pymongocrypt-1.1.1
pymongocrypt-1.1.2
pymongocrypt-1.10.0
pymongocrypt-1.10.1
pymongocrypt-1.11.0
pymongocrypt-1.12.0
pymongocrypt-1.12.1
pymongocrypt-1.12.2
pymongocrypt-1.12.2rc1
pymongocrypt-1.12.2rc2
pymongocrypt-1.12.2rc4
pymongocrypt-1.13.0
pymongocrypt-1.14.0
pymongocrypt-1.14.1
pymongocrypt-1.15.0
pymongocrypt-1.15.1
pymongocrypt-1.16.0
pymongocrypt-1.17.0
pymongocrypt-1.18.0
pymongocrypt-1.18.0.dev0
pymongocrypt-1.18.1
pymongocrypt-1.2.0
pymongocrypt-1.2.2rc0
pymongocrypt-1.3.0
pymongocrypt-1.3.0b0
pymongocrypt-1.3.1
pymongocrypt-1.4.0
pymongocrypt-1.4.1
pymongocrypt-1.5.0
pymongocrypt-1.5.1
pymongocrypt-1.5.2
pymongocrypt-1.6.0
pymongocrypt-1.6.1
pymongocrypt-1.7.0
pymongocrypt-1.8.0
pymongocrypt-1.9.0
pymongocrypt-1.9.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-81523.json"