MongoDB C Driver prior to 1.30.15 and 2.5.8 affected by vulnerabilities
Original title: MongoDB security advisory (AV26-1122)
MongoDB C Driver versions prior to 1.30.15 and 2.5.8 have vulnerabilities that can lead to data leakage and aborts.
As of November 3, 2026 MongoDB is affected by vulnerabilities in the C Driver Prior to 1.30.15 Prior to 2.5.8. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Failure to parse OP_COMPRESSED reply can leak mongoc_gridfs_bucket_download_to_stream may abort on bad metadata.
- C Driver affected prior to 1.30.15
- C Driver affected prior to 2.5.8
- Vulnerabilities may cause data leakage
- May cause aborts on bad metadata
| Product | Affected |
|---|---|
| MongoDB C Driver | Prior to 1.30.15 Prior to 2.5.8 |
- 1.apply any necessary updates
- 2.review provided web links
- Vendors
- MongoDB
- Products
- C Driver
- Organizations
- Canadian Centre for Cyber Security
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1122 Date: November 4, 2026 As of November 3, 2026, MongoDB is affected by vulnerabilities in the following product: C Driver Prior to 1. 30. 15 Prior to 2.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.