CVE-2026-96744

Name of the Vulnerable Software and Affected Versions MongoDB integration for Laravel (affected versions not specified)

Description Improper neutralization of special elements in the data query logic within the cache lock implementation allows a caller-supplied lock owner value to be evaluated as an aggregation expression instead of a literal value. An authenticated user capable of influencing the owner value used during lock acquisition or restoration may seize or prematurely expire a lock held by another process, potentially resulting in duplicated or conflicting operations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.