Description
An issue in MongoDB Server-s Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause unauthorized modification or destruction of data belonging to a different collection. This is due to insufficient validation of certain internal metadata references before they are used to perform operations on other namespaces.
CVSS 8.1EPSS 0%Risk 0.81
View source- Published
- 2026-08-11 19:17:29
- Last modified
- 2026-08-11 21:17:34
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H