CVE-2026-81527

Name of the Vulnerable Software and Affected Versions MongoDB C# Driver (affected versions not specified)

Description A NoSQL/expression injection weakness exists in the LINQ-to-aggregation query translation layer, affecting both aggregation expression and query filter translation. This occurs when application-supplied values are embedded in certain query constructs and special elements are not properly escaped before transmission to the database. Consequently, the database may interpret parts of the value as query logic instead of data, allowing a user to supply values that cause unintended data to be returned or query results to be altered.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.