Memory Handling Weakness in MongoDB C# Driver Exposing Data

CVE-2026-114651

What is CVE-2026-114651?

A memory-handling weakness has been discovered in the BSON deserialization component of the MongoDB C# Driver. This vulnerability allows an unauthenticated user to exploit the system by providing specially crafted serialized data. When the driver processes this data, it may inadvertently reveal residual bytes from previously processed inputs. This could potentially expose a limited amount of information pertaining to other requests or user accounts within the consuming application, as no authentication or permissions are necessary to trigger the issue. It is essential for developers using the MongoDB C# Driver to be aware of this vulnerability and update to the latest version to mitigate risks.

References