CVE-2026-81522
Description
A flaw was found in the MongoDB C++ Driver. This weakness allows special characters to be embedded in caller-supplied namespace identifiers. An application that constructs a namespace identifier from untrusted input without proper validation could be redirected to an unintended target. This could lead to limited unauthorized read and write access to data belonging to other logical tenants within the affected application.
Statement
A namespace identifier injection flaw was found in the MongoDB C++ Driver. Applications that construct database or collection names from untrusted input without proper validation are vulnerable to this issue. An attacker with low-level privileges could exploit this weakness by embedding special characters (period '.' or NUL bytes) in namespace identifiers, redirecting operations to unintended targets. This could result in limited unauthorized read and write access to data belonging to other logical tenants within the affected application.
Mitigation
Update to MongoDB C++ Driver r4.5.1 or later, which validates database and collection name arguments against special characters. Applications should implement input validation to reject or sanitize untrusted data before using it to construct namespace identifiers.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 8.1 | N/A | 8.1 |
| Attack Vector | Network | N/A | Network |
| Attack Complexity | Low | N/A | Low |
| Privileges Required | Low | N/A | Low |
| User Interaction | None | N/A | None |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | High | N/A | High |
| Integrity Impact | High | N/A | High |
| Availability Impact | None | N/A | None |
Vector
Red Hat: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
cve.org: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Understanding the Weakness (CWE)
Integrity
Technical Impact: Unexpected State
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
