CVE-2026-81526

Name of the Vulnerable Software and Affected Versions MongoDB Rust Driver (affected versions not specified)

Description The driver fails to neutralize special characters in a caller-supplied target identifier before embedding it in server requests. An actor capable of influencing this identifier can redirect write operations to an unintended target within the same deployment using the application's credentials. This can lead to the unauthorized modification of data across different logical boundaries enforced by the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.