CVE-2026-81526

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-81526

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-81526.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-81526

Published

2026-08-27T18:32:27Z

Modified

2026-09-03T03:48:17Z

Severity

7.1 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Cross-database write redirection via unvalidated dotted database name in bulk write namespaces

Details

The MongoDB Rust Driver does not neutralize special characters in a caller-supplied target identifier before embedding it in the request it sends to the server. An actor able to influence that identifier in an application using the driver may cause write operations to be applied to an unintended target within the same deployment using the application's own credentials. This may result in unauthorized modification of data belonging to another logical boundary enforced by the application.

Database specific

{
    "cna_assigner": "mongodb",
    "cwe_ids": [
        "CWE-74"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/81xxx/CVE-2026-81526.json"
}

References

Affected packages

Git / github.com/mongodb/mongo-rust-driver

Affected ranges

Type

GIT

Repo

https://github.com/mongodb/mongo-rust-driver

Events

Introduced

7bc5b39e56e6040ef7338d8c0d32981795875c7b

Fixed

78b87a56c48ab7cb6a2ff06a37fa663498ea8b13

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "3.0.0"
        },
        {
            "fixed": "3.8.2"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-81526.json"