CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.4. It affects MongoDB.
CVE
CVE-2026-8201
Severity
MEDIUM
CVSS
6.4
EPSS
0.13%
MongoDB
Original NVD Description
A use-after-free vulnerability exists in MongoDB's Field-Level Encryption (FLE) query analysis component, affecting client-side uses of mongocryptd and crypt_shared. Triggering this vulnerability requires control over the structure of a client's FLE-related query. This issue impacts MongoDB Server’s mongocryptd component v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2.
Related CVEs
Other vulnerabilities affecting the same vendor(s)