VendorsMongoDBlibmongocryptany version
Vulnerabilities

MongoDB Libmongocrypt any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2026-84971
Persistent client crash loop via undersized FLE2 insert-update ciphertext in decryption path
Published 2026-09-03 · Analyzed
7.1EPSS 0.003
CVE-2026-84962
Authenticated KMS request forgery via CRLF injection in GCP key identifier strings
Published 2026-09-03 · Analyzed
5.7EPSS 0.002
CVE-2026-81523
Cross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocrypt
Published 2026-08-27 · Analyzed
4.4EPSS 0.001