EUVD-2026-86346
GHSA-qx36-8mw2-4r3x
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
PR:L because the attacker must already have write access to encryption key metadata; S:C and C:L reflect connections reaching local sockets beyond the driver's authority; no chosen content means I:N/A:N.
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Primary rating from Vendor (mongodb).
CVSS VectorVendor: mongodb
Lifecycle Timeline
3Blast Radius
ecosystem impact- 21 pypi packages depend on pymongo (18 direct, 3 indirect)
Ecosystem-wide dependent count for version 3.9.0.
DescriptionCVE.org
The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an application using the driver to open connections to local sockets on the application host. Data sent over these connections is limited to the start of a TLS handshake, so no chosen content is transmitted.
AnalysisAI
The MongoDB Python Driver (PyMongo) versions 3.9.0 through 4.18.1 can be induced to open connections to local Unix domain sockets on the application host when an attacker who already holds write access to the encryption key metadata in the database alters a key management (KMS) endpoint value so that it ends in '.sock' - a string the client-side field level encryption (CSFLE) code path mistakes for a local socket path instead of a remote host. Exploitation requires the opt-in, non-default CSFLE feature to be in use and an authenticated attacker with database-side write access to the key vault, and it is only reachable over the network in the sense that CVSS scores the vector AV:N/PR:L; the transmitted bytes are restricted to the beginning of a TLS handshake, so no attacker-chosen content reaches the socket and data exfiltration or arbitrary remote-host reachability is not achievable. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires (1) the application to use the MongoDB Python Driver's client-side field level encryption (CSFLE) feature - a non-default, opt-in capability - and (2) the attacker to already hold WRITE access to the encryption key metadata stored in the database, allowing modification of the key management (KMS) endpoint value to a string ending in '.sock'. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuinely low-priority, low-risk issue despite the CWE-918 SSRF classification. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade the MongoDB Python Driver to 4.18.2 or later - this is the vendor-released patch - as advertised in the GitHub release tag (https://github.com/mongodb/mongo-python-driver/releases/tag/4.18.2) and detailed in the 4.18.2 changelog (https://github.com/mongodb/mongo-python-driver/blob/4.18.2/doc/changelog.rst); no server-side MongoDB upgrade is required because the flaw lies in the driver. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Wazuh SIEM platform versions 4.4.0 through 4.9.0 contain an unsafe deserialization vulnerability in the DistributedAPI t
BentoML version 1.4.2 and earlier contains an unauthenticated remote code execution vulnerability through insecure deser
pgAdmin 4 contains critical remote code execution vulnerabilities in the Query Tool download and Cloud Deployment endpoi
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Rated critica
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
pyLoad download manager version prior to 0.5.0b3.dev77 exposes the Flask SECRET_KEY through an unauthenticated endpoint.
Langflow (a visual LLM pipeline builder) contains a critical unauthenticated code execution vulnerability (CVE-2026-3301
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and conse
Unauthenticated remote code execution affects Kestra OSS (the open-source event-driven orchestration platform) prior to
Unauthenticated remote code execution in Marimo ≤0.20.4 allows attackers to execute arbitrary system commands via the `/
pyLoad is the free and open-source Download Manager written in pure Python. Rated medium severity (CVSS 5.3), this vulne
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | Fixed |
| openSUSE Leap 16.0 | Fixed |
| openSUSE Tumbleweed | Fixed |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP4 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | Affected |
| openSUSE Leap 15.3 | Affected |
| openSUSE Leap 15.4 | Affected |
| openSUSE Leap 15.5 | Affected |
| openSUSE Leap 15.6 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today