Skip to contentMongodb C# Driver vulnerabilities
- mongodb c# driverBSON output corruption via out-of-range binary subtype bypassing UUID and OldBinary guardsCVE-2026-1146546.9 Medium
- mongodb c# driverSilent client-side encryption bypass via unescaped field-name regex in CSFLE schema builderCVE-2026-1146537.1 High
- mongodb c# driverUpdate operator injection via single-element list rewriting in the update builderCVE-2026-1146527.1 High
- mongodb c# driverCross-document data leak via malformed BSON array parsing in reused thread bufferCVE-2026-1146516.3 Medium
- mongodb c# driver, mongodb.libmongocrypt nuget package +1 morePlaintext exposure of encrypted fields via ANSI code-page corruption of database nameCVE-2026-1146506.9 Medium
- mongodb c# driverAuthentication bypass via issuer-and-serial-only certificate equality in shared cluster cacheCVE-2026-1146497.6 High
- mongodb c# driverNoSQL injection via dot and dollar characters in LINQ filter field names and dictionary keysCVE-2026-1146487.2 High
- mongodb c# driverNoSQL operator injection via unvalidated replacement document in findOneAndReplaceCVE-2026-1146475.3 Medium
- mongodb c# driverNoSQL command injection via mismatched raw BSON length prefix written verbatim to the wireCVE-2026-1146466.9 Medium
- mongodb c# driverMemory-exhaustion denial of service via unbounded symbol interning during BSON/JSON deserializationCVE-2026-1146448.2 High
- mongodb c# driverDuplicate geometry fields via unvalidated GeoJSON extra membersCVE-2026-1146435.3 Medium
- mongodb c# driver, c\# driver +1 moreRegular expression injection via unescaped characters in LINQ query translation in MongoDB C# DriverCVE-2026-880267.1 High
- mongodb c# driver, c\# driver +1 moreGridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C# DriverCVE-2026-880256.1 Medium
- mongodb c# driver, c\# driver +1 moreKMS master key exposure via unredacted credential serialization in driver settings stringCVE-2026-815306.8 Medium
- mongodb c# driver, c\# driver +1 moreConnection-option injection via unescaped settings in the canonical MongoDB URL builderCVE-2026-815297.1 High
- mongodb c# driver, c\# driver +1 moreNoSQL injection via array replacement bypassing update shape validation in driver write pathCVE-2026-815285.3 Medium
- mongodb c# driver, c\# driver +1 moreNoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translationCVE-2026-815276.9 Medium