Medium severity5.4NVD Advisory· Published Aug 27, 2026· Updated Sep 29, 2026
CVE-2026-81524
CVE-2026-81524
Description
A weakness in the MongoDB C Driver allows special elements in caller-supplied database and collection name components to pass without sanitization when the driver composes the target namespace for an operation. An application that incorporates untrusted input into these name components can have operations directed at a resource other than the one intended.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3(expand)+ 1 more
- (no CPE)
- (no CPE)
Patches
Vulnerability mechanics
References
2- jira.mongodb.org/browse/CDRIVER-6424nvdVendor Advisory
- github.com/mongodb/mongo-c-driver/releases/tag/2.5.1nvdProduct
News mentions
1- MongoDB: 20 Vulnerabilities in BI Connector, Drivers Disclosed TogetherVypr Intelligence · Aug 28, 2026