CVE-2026-8201
Essential information
- Published
- 13/05/2026 04:17
- Modified
- 13/05/2026 22:50
- Author
- —
- Creator
- —
- CVSS
- 6.1 MEDIUM (v3) 6.1 MEDIUM (v4.0)
- CISA KEV
- No
- CWE
- —
- CVSS vector
-
—
—
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS metrics
- Access vector
- —
- Access complexity
- —
- Authentication
- —
- Confidentiality impact
- —
- Integrity impact
- —
- Availability impact
- —
- Exploitability
- —
- Remediation level
- —
- Report confidence
- —
- Temporal score
- —
- Attack vector
- —
- Attack complexity
- —
- Privileges required
- —
- User interaction
- —
- Scope
- —
- Confidentiality impact
- —
- Integrity impact
- —
- Availability impact
- —
- Exploit code maturity
- —
- Remediation level
- —
- Report confidence
- —
- Temporal score
- —
- Attack vector
- NETWORK
- Attack complexity
- HIGH
- Attack requirements
- PRESENT
- Privileges required
- LOW
- User interaction
- NONE
- Confidentiality (V)
- LOW
- Confidentiality (S)
- LOW
- Integrity (V)
- LOW
- Integrity (S)
- NONE
- Availability (V)
- HIGH
- Availability (S)
- NONE
- Exploit maturity
- NOT_DEFINED
Description
A use-after-free vulnerability exists in MongoDB's Field-Level Encryption (FLE) query analysis component, affecting client-side uses of mongocryptd and crypt_shared. Triggering this vulnerability requires control over the structure of a client's FLE-related query.
This issue impacts MongoDB Server’s mongocryptd component v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2.
NVD status
- Status
- Analyzed — CVE is currently being analyzed by NVD staff, this process results in association of reference link tags, CVSS scores, CWE association, and CPE applicability statements.
- Source
- [email protected]
- NVD
- View on NVD
Affected products (CPE)
| Product | CPE |
|---|---|
| mongodb / mongodb | cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:* |
| mongodb / mongodb | cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:* |
| mongodb / mongodb | cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:* |
| mongodb / mongodb | cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:* |