CVE-2026-106429

Name of the Vulnerable Software and Affected Versions MongoDB libmongocrypt (affected versions not specified)

Description An integer underflow exists in the KMS endpoint-parsing logic. This occurs when an authenticated user modifies a key document in the key vault collection, or when an application accepts a KMS endpoint containing a colon after its path or query during key creation. This flaw can lead to an allocation failure that terminates the application process. The issue does not allow access to memory outside its allocated bounds.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.