CVE-2026-114654

Name of the Vulnerable Software and Affected Versions MongoDB C# Driver (affected versions not specified)

Description A numeric-type conversion flaw exists in the BSON handling library. This issue allows an out-of-range binary subtype value provided via untrusted textual input to bypass binary-element integrity checks. During subsequent encoding, the value is narrowed to a smaller wire representation, resulting in binary elements that misdeclare their type or length. An unauthenticated party can provide text that causes the application to emit and persist malformed binary data, which may be rejected by readers or silently interpreted as shorter than the validated data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.