Search: CVE-2026-88031

CVE-2026-88031 is a vulnerability in the GridFS component of the MongoDB Go Driver where improper neutralization of special elements in data query logic allows a structured file identifier to be misinterpreted as a query condition. An authenticated user able to influence the identifier can cause deletion of all GridFS file chunks in the affected bucket, making stored files unreadable. The issue affects versions >=1.0.0 <1.17.10 and >=2.0.0 <2.9.1 and has been fixed in versions 1.17.10 and 2.9.1.