CVE-2026-84962

A flaw was found in MONGOCRYPT. An unauthorized user with key vault write access could exploit this vulnerability to cause an authorized client to issue arbitrary authenticated Google Cloud KMS Key Management Service API calls. This could lead to privilege escalation, allowing the unauthorized us...