CVE-2026-93762

Mongoid (MongoDB's Ruby ODM) has an unsafe reflection weakness in the in-memory query path used for embedded documents . When an application passes an externally supplied field name to certain query methods, an unauthenticated attacker can achieve attribute disclosure of stored document data and ...