MongoDB Server versions prior to 7.0.26, 8.0.16, and 8.2.2 on Windows and Apple platforms improperly validate Extended Key Usage (EKU) fields during TLS handshakes. This allows clients or servers with certificates missing the required EKU attributes (clientAuth or serverAuth) to successfully complete TLS handshakes. Linux systems are not affected by this issue. The vulnerability has been fixed in the specified later versions.