MongoDB Queryable Encryption Metadata Write Bypass
CVE-2026-120805 Published on November 10, 2026

Authorization bypass via redirected FLE2 state-collection writes in encrypted CRUD path
In MongoDB Server, an authenticated user with insert privileges on a collection could craft a command with specially constructed encryption-related parameters to redirect internal Queryable Encryption metadata writes to metadata belonging to other encrypted collections within the same database. The servers authorization layer validated only the user-facing target collection namespace, while subsequent internal writes derived from client-supplied parameters were performed with elevated internal privileges, bypassing the original callers permission scope. This could allow unauthorized writes into another collections Queryable Encryption metadata, potentially corrupting encrypted index state and compaction operations.

NVD

Vulnerability Analysis

CVE-2026-120805 can be exploited with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.

Exploitation:
NONE
Automatable:
NO
Technical Impact:
PARTIAL
Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE

Weakness Type

What is an AuthZ Vulnerability?

The software does not perform an authorization check when an actor attempts to access a resource or perform an action.

CVE-2026-120805 has been classified to as an AuthZ vulnerability or weakness.


Products Associated with CVE-2026-120805

Want to know whenever a new CVE is published for MongoDB? stack.watch will email you.

MongoDB

Affected Versions

MongoDB Server:

Exploit Probability

EPSS
0.15%
Percentile
4.57%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.