MongoDB C Driver advisory flags information leak and crash flaws
VULNERABILITYMongoDBredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
MongoDB advisory AV26-1122, dated 4 November 2026, covers the MongoDB C Driver before 1.30.15 and before 2.5.8. The flaws are a failure to parse OPCOMPRESSED replies that can leak data, and a case where mongocgridfsbucketdownloadtostream may abort on bad metadata. Administrators should review the linked MongoDB alerts and apply the updates.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Check whether applications use the MongoDB C Driver, including through language bindings or other software.
- Upgrade the MongoDB C Driver to version 1.30.15 or later in the 1.x line, or 2.5.8 or later in the 2.x line.
- Review the MongoDB alerts linked in the advisory for further detail.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Canadian Centre for Cyber Security
Who and what is in it
Companies