CVE-2026-93764

Name of the Vulnerable Software and Affected Versions Mongoid (affected versions not specified)

Description Mongoid may omit encryption rules for fields declared on embedded models during the generation of the client-side field-level encryption schema. This allows applications using this feature to store values intended for encryption in plaintext without triggering errors or warnings. Consequently, individuals with read access to the database, backups, or underlying data files can view sensitive data that should remain unreadable outside the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.