CVE-2025-11695

High CVSS: 8.0

When tlsInsecure=False appears in a connection string, certificate validation is disabled.

This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5

Vendor

Mongodb

Product

Rust Driver

CWE

CWE-295

Yayın Tarihi

2025-10-13 17:15:34

Güncelleme

2025-12-04 21:36:42

Source Identifier

cna@mongodb.com

KEV Date Added

Kategoriler

CWE-295 Rust Driver HIGH Mongodb 2025

Referanslar

https://jira.mongodb.org/browse/RUST-2264

Benzer Kayıtlar

Medium

CVE-2026-5170

A user with access to the cluster with a limited set of privilege actions can trigger a crash of a mongod process during…

Medium

CVE-2026-4358

A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-fre…

Low

CVE-2026-4359

A compromised third party cloud server or man-in-the-middle attacker could send a malformed HTTP response and cause a cr…

High

CVE-2026-25610

An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints.

High

CVE-2026-25613

An authorized user may disable the MongoDB server by issuing a query against a collection that contains an invalid compo…

Medium

CVE-2026-25609

Incorrect validation of the profile command may result in the determination that a request altering the 'filter' is read…