EUVD-2026-35859
GHSA-jp8p-fq38-v738
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from Vendor (mongodb) · only source for this CVE.
CVSS VectorVendor: mongodb
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
7DescriptionCVE.org
A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption (QE) or Client-Side Field Level Encryption (CSFLE) results in literal values for encrypted fields within the $vectorSearch stage filter expressions to be sent to the server as plaintext instead of ciphertext.
AnalysisAI
Sensitive information disclosure in MongoDB Server affects deployments using Queryable Encryption (QE) or Client-Side Field Level Encryption (CSFLE) when issuing $vectorSearch aggregation queries. Due to a flaw in client-side query analysis, literal values intended for encrypted fields inside $vectorSearch filter expressions are transmitted to the server as plaintext instead of ciphertext, defeating the confidentiality guarantee of client-side encryption. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV.
Technical ContextAI
MongoDB's Queryable Encryption and Client-Side Field Level Encryption are designed so that sensitive field values are encrypted on the client before transmission, ensuring the database server only handles ciphertext. The bug lives in the client driver / mongocryptd query analysis path that decides which literals in an aggregation pipeline need to be replaced with their encrypted equivalents. For the $vectorSearch stage - used for similarity search over vector embeddings - the analyzer fails to recognize literal values inside filter expressions as belonging to encrypted fields, so those values bypass encryption and reach the server in cleartext, matching the root cause class described in CWE-319 (Cleartext Transmission of Sensitive Information). The affected component per the CPE is mongodb:mongodb_server, though the defect is fundamentally in the encryption-aware query processing tied to QE/CSFLE.
RemediationAI
Patch availability per vendor advisory is referenced through MongoDB ticket SERVER-123507 (https://jira.mongodb.org/browse/SERVER-123507); operators should upgrade MongoDB Server, the MongoDB drivers, and the crypt_shared / mongocryptd query analyzer to the fixed versions listed in that advisory once published - no exact fix version is enumerated in the provided input. As a compensating control until patched, avoid issuing $vectorSearch aggregation stages against collections that contain QE/CSFLE-encrypted fields, or rewrite vector search filters so they reference only non-encrypted fields (trade-off: loses the ability to filter vector results by encrypted attributes). Operators handling previously transmitted data should also rotate any field values that may have been sent in cleartext and audit server logs, oplog, and backups for residual plaintext, since cleartext that has reached storage cannot be retroactively re-encrypted by client upgrades alone.
More in Mongodb Server
View allCredential exposure in MongoDB Server's replica-set/sharded-cluster internal authentication allows an adjacent-network a
Out-of-bounds memory write in MongoDB Server's time-series collection feature enables arbitrary code execution by authen
MongoDB Server sharded clusters are vulnerable to use-after-free memory corruption when authenticated users with read pe
Remote unauthenticated denial-of-service in MongoDB Server's BSON validation layer allows attackers to crash the mongod
Unauthenticated denial of service in MongoDB Server's aggregation framework allows remote attackers to crash the mongos
Pre-authentication denial-of-service in MongoDB Server allows unauthenticated remote clients to crash the database proce
Authenticated users can crash MongoDB Server by chaining specific server-side JavaScript operations ($_internalJsEmit or
Use-after-free in MongoDB Server's timeseries bucket lifecycle handling allows an authenticated user with write-level pr
Use-after-free memory corruption in MongoDB Server's $graphLookup aggregation stage allows an authenticated high-privile
Memory disclosure and denial-of-service in MongoDB Server allows any authenticated user with aggregate command privilege
Queryable Encryption maintenance operations in MongoDB Server permit an authenticated low-privileged database user to ca
Authorization bypass in MongoDB Server allows an authenticated user holding only a limited database-scoped role to issue
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today