CVE-2026-114644

Name of the Vulnerable Software and Affected Versions MongoDB C# Driver (affected versions not specified)

Description The BSON library within the driver contains an uncontrolled resource consumption weakness during the deserialization of a specific BSON value type. When an application deserializes untrusted content, the library retains derived data for the entire process lifetime without limits on accumulation. An unauthenticated remote attacker can trigger this process to cause unbounded memory growth, leading to memory exhaustion and a denial of service for the host application. This issue does not affect confidentiality, integrity, or any MongoDB server components.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.