CVE-2026-106429: fallo de gravedad alta en MongoDB libmongocrypt
Application denial of service via malformed KMS endpoint in MongoDB libmongocrypt
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.1epss 0.3%
An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This can occur when an authenticated user modifies a key document in the key vault collection, or when an application accepts a KMS endpoint containing a colon after its path or query during key creation. The issue does not access memory outside its allocated bounds.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Productos afectados
MongoDB · libmongocryptCVEs relacionadas — MongoDB libmongocrypt
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-114655MEDIUMKMS request injection via unsanitized key vault and provider values in libmongocryptEPSS 0.3%CVE-2026-106433HIGHHeap corruption via duplicate masterKey fields in MongoDB libmongocryptEPSS 0.3%CVE-2026-84971HIGHPersistent client crash loop via undersized FLE2 insert-update ciphertext in decryption pathEPSS 0.3%CVE-2026-84962MEDIUMAuthenticated KMS request forgery via CRLF injection in GCP key identifier stringsEPSS 0.2%CVE-2026-106434MEDIUMUnrecognized payload acceptance in explicit decryption in MongoDB libmongocryptEPSS 0.1%CVE-2026-81523LOWCross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocryptEPSS 0.1%