CVE-2026-81524

Name of the Vulnerable Software and Affected Versions MongoDB C Driver (affected versions not specified)

Description A weakness exists where the driver fails to sanitize special elements in caller-supplied database and collection name components during the composition of the target namespace for an operation. This allows for cross-tenant database retargeting via dot/NUL injection in namespace strings. An application that incorporates untrusted input into these name components can have operations directed at a resource other than the one intended.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.