Vulnerability Description
A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embedded in those identifiers. An application that builds a namespace identifier from untrusted input without validating it may therefore have its operation directed at a different target than intended. This can result in limited unauthorized read and write access to data belonging to another logical tenant of the affected application.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/mongodb/mongo-cxx-driver/releases/tag/r4.5.1
- https://jira.mongodb.org/browse/CXX-3552
FAQ
What is CVE-2026-81522?
CVE-2026-81522 is a vulnerability with a CVSS score of 8.1 (HIGH). A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embedded in those identifiers. An application that builds a namespace identifier from...
How severe is CVE-2026-81522?
CVE-2026-81522 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-81522?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.