Unauthorized Data Modification Risk in MongoDB Rust Driver by MongoDB

CVE-2026-81526

What is CVE-2026-81526?

The MongoDB Rust Driver is susceptible to a vulnerability where it fails to properly neutralize special characters in a target identifier supplied by the caller. This oversight can allow an actor with the ability to manipulate the identifier to perform write operations on unintended targets within the same deployment. Such actions can lead to unauthorized modifications of data across logical boundaries as defined by the application, potentially compromising data integrity and security.

References