CVE-2026-126823 is a vulnerability in the MongoDB Atlas SQL JDBC Driver versions 2.2.1 through 4.0.1. A local user with an ordinary account on the same host can place a file in a shared temporary location that the driver's native library loading routine will load without verifying its origin. This can lead to arbitrary code execution within the Java application process, potentially causing data disclosure, data alteration, or process unavailability.