CVE-2026-106434

Name of the Vulnerable Software and Affected Versions libmongocrypt (affected versions not specified)

Description The explicit decryption component of MongoDB libmongocrypt may return an unrecognized encrypted payload without modification instead of triggering a decryption error. This allows an actor with the ability to modify stored encrypted fields, such as a network intermediary, server, or database writer, to force an application to process the provided bytes as decrypted plaintext.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.