CVE-2026-114650

Name of the Vulnerable Software and Affected Versions MongoDB .NET/C# driver (affected versions not specified)

Description A flaw in the client-side encryption support allows data intended for client-side field-level encryption to be written without encryption. This occurs under specific platform text-encoding configurations where an internal name conversion loses information, causing the encryption layer to fail to associate the operation with its configured encryption rules. Consequently, the operation proceeds without raising an error, allowing an application user to persist sensitive fields in plaintext and compromising data confidentiality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.