CVE-2026-126835

The MongoDB Node.js driver contains a vulnerability where it fails to consistently enforce permitted-host restrictions during OIDC authentication . Due to this oversight, a bearer token generated by an application's login callback can be transmitted to a host outside the configured set of permitt...