Weakness in MongoDB C++ Driver Namespace Handling

CVE-2026-81522

What is CVE-2026-81522?

A vulnerability exists in the MongoDB C++ Driver due to inadequate handling of caller-supplied namespace identifiers. This flaw permits the inclusion of special characters within these identifiers, potentially leading to unintended operations on resources. When an application constructs a namespace identifier from untrusted input without sufficient validation, it becomes susceptible to directing requests to incorrect targets. As a consequence, unauthorized access—both read and write—to data belonging to other logical tenants may occur.

References