CVE-2026-93764

A flaw was found in Mongoid. When generating the client-side field-level encryption schema, Mongoid may fail to apply encryption rules to fields within embedded models. This oversight can lead to sensitive data, intended for encryption, being stored in plaintext without any indication or error...

CVE-2026-93764

Mongoid may omit encryption rules for fields declared on embedded models when generating the client-side field-level encryption schema. Applications that enable this feature can therefore store values intended to be encrypted in readable form, with no error or warning. A party with routine read...

CVE-2026-93764 Plaintext storage of encrypted fields via skipped embedded models in encryption schema generation

Mongoid may omit encryption rules for fields declared on embedded models when generating the client-side field-level encryption schema. Applications that enable this feature can therefore store values intended to be encrypted in readable form, with no error or warning. A party with routine read...

CVE-2026-93764 Plaintext storage of encrypted fields via skipped embedded models in encryption schema generation

Mongoid may omit encryption rules for fields declared on embedded models when generating the client-side field-level encryption schema. Applications that enable this feature can therefore store values intended to be encrypted in readable form, with no error or warning. A party with routine read...

CVE-2026-93764 Plaintext storage of encrypted fields via skipped embedded models in encryption schema generation

Mongoid may omit encryption rules for fields declared on embedded models when generating the client-side field-level encryption schema. Applications that enable this feature can therefore store values intended to be encrypted in readable form, with no error or warning. A party with routine read...

CVE-2026-93764

Mongoid , MongoDB's Ruby ODM, may omit encryption rules for fields declared on embedded models when generating its client-side field-level encryption schema. Applications that enable this feature can silently store values intended to be encrypted in plaintext , with no error or warning. A party w...

EUVD-2026-83195

Mongoid may omit encryption rules for fields declared on embedded models when generating the client-side field-level encryption schema. Applications that enable this feature can therefore store values intended to be encrypted in readable form, with no error or warning. A party with routine read...

Plaintext storage of encrypted fields via skipped embedded models in encryption schema generation

Mongoid may omit encryption rules for fields declared on embedded models when generating the client-side field-level encryption schema. Applications that enable this feature can therefore store values intended to be encrypted in readable form, with no error or warning. A party with routine read...

PT-2026-95563

Name of the Vulnerable Software and Affected Versions Mongoid affected versions not specified Description Mongoid may omit encryption rules for fields declared on embedded models during the generation of the client-side field-level encryption schema. This allows applications using this feature to...

CVE-2026-93764: Cleartext Storage of Sensitive Information

Mongoid may omit encryption rules for fields declared on embedded models when generating the client-side field-level encryption schema. Applications that enable this feature can therefore store values intended to be encrypted in readable form, with no error or warning. A party with routine read...