VYPR
← All advisories
Medium severity6.4NVD Advisory· Published May 13, 2026· Updated May 13, 2026

CVE-2026-8201

CVE-2026-8201

Description

A use-after-free vulnerability exists in MongoDB's Field-Level Encryption (FLE) query analysis component, affecting client-side uses of mongocryptd and crypt_shared. Triggering this vulnerability requires control over the structure of a client's FLE-related query.

This issue impacts MongoDB Server’s mongocryptd component v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2.

Affected products

1
  • MongoDB/MongoDBllm-fuzzy
    Range: >=7.0 <7.0.34, >=8.0 <8.0.23, >=8.2 <8.2.9, >=8.3 <8.3.2

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.