CVE-2026-81523

score

0.1

cvss

4.4

epss

0.1%

published

2026-08-27

kev added

—

first seen

2026-10-21

MongoDB libmongocrypt contains a broken access control caused by missing input validation in automatic-encryption context setup, letting attackers cause incorrect schema selection leading to limited information disclosure or modification, exploit requires attacker to supply database identifier.