Insufficient Validation in MongoDB Controllers for Kubernetes Affects Ops Manager Backup Configuration
CVE-2026-103546

2.3LOW

Key Information:

Vendor

Mongodb, Inc.

Status
Mongodb Controllers For Kubernetes
Vendor
CVE Published:
5 October 2026

What is CVE-2026-103546?

In MongoDB Controllers for Kubernetes, a flaw in the validation process of Ops Manager backup configurations enables users with the ability to modify an OpsManager custom resource to inadvertently instigate unauthorized administrative alterations in Ops Manager. This issue poses a risk to those utilizing Enterprise Ops Manager backup reconciliation.

Affected Version(s)

Mongodb Controllers for Kubernetes 0 < 1.13.0

References

https://github.com/mongodb/mongodb-kubernetes/releases/ta...
release-notes

CVSS V4

Score:
2.3
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.