35 matches found
CVE-2026-126838
The MongoDB Rust Driver contains a vulnerability where a component responsible for client-side field level encryption settings includes key management service (KMS) credential material in its diagnostic formatting output without proper redaction. If an application records or displays this formatt...
CVE-2026-126838 Rust Driver public Client Debug output exposes CSFLE KMS master-key material
A MongoDB Rust Driver component that holds client-side field level encryption settings includes key management service credential material in its diagnostic formatting output without redaction. An application that records or displays this formatted output may place that material where a party wit...
CVE-2026-120813
An issue in MongoDB Server's client-side field-level encryption CSFLE schema processing component allows encryption metadata to be silently dropped during schema parsing under certain conditions. A party who can deliver a specially crafted schema to a user's CSFLE client may cause sensitive data...
CVE-2026-120813 Plaintext storage of encrypted fields via duplicate keys in client-side encryption schema parsing
An issue in MongoDB Server's client-side field-level encryption CSFLE schema processing component allows encryption metadata to be silently dropped during schema parsing under certain conditions. A party who can deliver a specially crafted schema to a user's CSFLE client may cause sensitive data...
EUVD-2026-122827
An issue in MongoDB Server's client-side field-level encryption CSFLE schema processing component allows encryption metadata to be silently dropped during schema parsing under certain conditions. A party who can deliver a specially crafted schema to a user's CSFLE client may cause sensitive data...
CVE-2026-120813
A vulnerability exists in the MongoDB Server client-side field-level encryption (CSFLE ) schema processing component. Due to an interpretation conflict (CWE-436), the system may silently drop encryption metadata during schema parsing under specific conditions. An attacker who can provide a specia...
CVE-2026-120673 Rust Driver 3.9.1 exports CSFLE plaintext in `db.query.text` before encrypting the command
A component of the MongoDB Rust Driver that records diagnostic tracing data can capture command content before automatic client-side field level encryption is applied. In deployments that turn on the optional tracing capability together with automatic in-use encryption, a party with read access t...
CVE-2026-120673
The MongoDB Rust Driver (version 3.9.1) contains a vulnerability where a diagnostic tracing component captures command content before automatic client-side field level encryption is applied. In environments where both optional tracing and automatic in-use encryption are enabled, an attacker with ...
CVE-2026-120673 Rust Driver 3.9.1 exports CSFLE plaintext in `db.query.text` before encrypting the command
A component of the MongoDB Rust Driver that records diagnostic tracing data can capture command content before automatic client-side field level encryption is applied. In deployments that turn on the optional tracing capability together with automatic in-use encryption, a party with read access t...
Rust Driver 3.9.1 exports CSFLE plaintext in `db.query.text` before encrypting the command
A component of the MongoDB Rust Driver that records diagnostic tracing data can capture command content before automatic client-side field level encryption is applied. In deployments that turn on the optional tracing capability together with automatic in-use encryption, a party with read access t...
CVE-2026-114653
The MongoDB C# Driver contains a vulnerability in its client-side encryption schema construction component. The driver fails to normalize or validate caller-supplied field identifiers, placing them into a position where they are interpreted as pattern expressions . This can cause client-side fiel...
CVE-2026-114653 Silent client-side encryption bypass via unescaped field-name regex in CSFLE schema builder
A client-side encryption schema construction component in the MongoDB C Driver places caller-supplied field identifiers into a position that is interpreted as a pattern expression, without normalizing or validating them. As a result, an application that designates certain fields for client-side...
CVE-2026-114653 Silent client-side encryption bypass via unescaped field-name regex in CSFLE schema builder
A client-side encryption schema construction component in the MongoDB C Driver places caller-supplied field identifiers into a position that is interpreted as a pattern expression, without normalizing or validating them. As a result, an application that designates certain fields for client-side...
Silent client-side encryption bypass via unescaped field-name regex in CSFLE schema builder
A client-side encryption schema construction component in the MongoDB C Driver places caller-supplied field identifiers into a position that is interpreted as a pattern expression, without normalizing or validating them. As a result, an application that designates certain fields for client-side...
PYSEC-2026-4295 PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption
Summary PyMongo passed the KMS endpoint of a data key verbatim into parsehost, which returns any string ending in .sock unchanged instead of validating it as a hostname and port. The driver's connection code then treats such an address as a Unix domain socket path and connects to it with AFUNIX...
CVE-2026-9741
A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption QE or Client-Side Field Level Encryption CSFLE results in literal values for encrypted fields within the $vectorSearch stage filter expressions to be sent to the server as plaintext instead of...
CVE-2026-9741: Cleartext Transmission of Sensitive Information
A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption QE or Client-Side Field Level Encryption CSFLE results in literal values for encrypted fields within the $vectorSearch stage filter expressions to be sent to the server as plaintext instead of...
CVE-2024-8013 CSFLE and Queryable Encryption self-lookup may fail to encrypt values in subpipelines
A bug in query analysis of certain complex self-referential $lookup subpipelines may result in literal values in expressions for encrypted fields to be sent to the server as plaintext instead of ciphertext. Should this occur, no documents would be returned or written. This issue affects mongocryp...
CVE-2024-8013
CVE-2024-8013 stems from a bug in query analysis of certain complex self-referential $lookup subpipelines that can cause literal values in expressions for encrypted fields to be sent to the server as plaintext instead of ciphertext. Impact: if triggered, no documents would be returned or written....
CSFLE and Queryable Encryption self-lookup may fail to encrypt values in subpipelines
A bug in query analysis of certain complex self-referential $lookup subpipelines may result in literal values in expressions for encrypted fields to be sent to the server as plaintext instead of ciphertext. Should this occur, no documents would be returned or written. This issue affects mongocryp...