Medium severity4.4NVD Advisory· Published Aug 27, 2026· Updated Sep 17, 2026
CVE-2026-81523
CVE-2026-81523
Description
A missing input-validation issue in MongoDB libmongocrypt's automatic-encryption context setup allows a caller-supplied database identifier to be accepted without sanitization. The resulting impact is limited to incorrect schema selection, which may lead to limited disclosure or modification of information handled by the application.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)
Patches
Vulnerability mechanics
References
2- jira.mongodb.org/browse/MONGOCRYPT-977nvdVendor AdvisoryIssue TrackingPatch
- github.com/mongodb/libmongocrypt/releases/tag/1.20.3nvdProduct
News mentions
1- MongoDB: 20 Vulnerabilities in BI Connector, Drivers Disclosed TogetherVypr Intelligence · Aug 28, 2026