AIKIDO-2026-739015

mongodb is vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')CVE-2026-81526 Published 2 days ago

Medium Risk

This Affects:

mongodb

3.0.0 - 3.8.1

Fixed in 3.8.2

Are you affected? Scan for Free

TL;DR

The MongoDB Rust driver builds bulk write namespace documents from caller-supplied database and collection names without validating them. When a database name contains a period, the value is embedded into the bulk write namespace and reinterpreted by the server as a different database and collection, so writes can be directed to an unintended database within the same deployment. Code that passes externally influenced names into a Client::bulk_write write model can have its writes redirected across logical boundaries, affecting data integrity. The fix validates database and collection name arguments against . and NUL bytes before serializing the namespace.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range and you pass externally influenced database or collection names into a Client::bulk_write write model namespace.

Background info

mongodb is vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in versions 3.0.0 - 3.8.1.