CVE-2026-88035: CWE-190: Integer Overflow or Wraparound in MongoDB C Driver
A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past the end of a small buffer. A party able to set the driver's connection settings may cause the application that embeds the driver to terminate unexpectedly. Reaching this code requires a build in which the optional external SASL authentication backend is present and a connection configured to use it.
AI Analysis
Technical Summary
This vulnerability involves an integer overflow or wraparound (CWE-190) in the MongoDB C Driver during client-side authentication. Specifically, a size check can wrap around when processing a large user-name value, leading to a buffer overflow condition. An attacker who can control the driver's connection settings may trigger this condition, causing the host application to crash. The issue only manifests if the driver is built with the optional external SASL authentication backend and a connection uses it.
Potential Impact
The vulnerability can cause the application embedding the MongoDB C Driver to terminate unexpectedly (crash). There is no indication of code execution or data corruption beyond application termination. The CVSS 4.0 score is 5.7 (medium severity), reflecting local attack vector with low complexity and partial privileges required.
Mitigation Recommendations
No official patch or fix is currently confirmed. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid using builds of the MongoDB C Driver with the optional external SASL authentication backend enabled and connections configured to use it if possible.
CVE-2026-88035: CWE-190: Integer Overflow or Wraparound in MongoDB C Driver
Description
A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past the end of a small buffer. A party able to set the driver's connection settings may cause the application that embeds the driver to terminate unexpectedly. Reaching this code requires a build in which the optional external SASL authentication backend is present and a connection configured to use it.
CVSS v4.0
Score 5.7medium
Affected software
MongoDB
C Driver
pkg:github/mongodb/mongo-c-driverRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves an integer overflow or wraparound (CWE-190) in the MongoDB C Driver during client-side authentication. Specifically, a size check can wrap around when processing a large user-name value, leading to a buffer overflow condition. An attacker who can control the driver's connection settings may trigger this condition, causing the host application to crash. The issue only manifests if the driver is built with the optional external SASL authentication backend and a connection uses it.
Potential Impact
The vulnerability can cause the application embedding the MongoDB C Driver to terminate unexpectedly (crash). There is no indication of code execution or data corruption beyond application termination. The CVSS 4.0 score is 5.7 (medium severity), reflecting local attack vector with low complexity and partial privileges required.
Mitigation Recommendations
No official patch or fix is currently confirmed. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid using builds of the MongoDB C Driver with the optional external SASL authentication backend enabled and connections configured to use it if possible.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- mongodb
- Date Reserved
- 2026-09-09T19:49:53.808Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6aa2f93ef625eac0738ac390
Added to database: 09/10/2026, 18:38:54 UTC
Last enriched: 09/10/2026, 18:45:18 UTC
Last updated: 09/10/2026, 19:19:17 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.