Type-Handling Flaw in MongoDB Integration Library by MongoDB

CVE-2026-118510

What is CVE-2026-118510?

A type-handling flaw in the MongoDB integration library can lead to improper access controls in applications. Specifically, the issue arises when a query mistakenly compiles a check for associated records using an incorrect data type. This flaw may allow users with limited privileges to gain unauthorized access, modify, or delete documents that should have been restricted. The lack of error feedback can make it challenging to detect this vulnerability, putting sensitive data at risk. Developers are encouraged to review their systems for reliance on this library and ensure proper checks are implemented.

References