Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may obtain stored file content beyond the intended target or cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable. The affected rename operation may also rename a stored file other than the intended target.
CVSS Details
- CVSS 4.0 Base Score: 6.1 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 8.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-noseUpgrade python3-docsUpgrade python3-distroUpgrade python3-bsonUpgrade python36-debugUpgrade python3-wheelUpgrade python-nose-docsUpgrade python3-virtualenvUpgrade python3-pymongoUpgrade python3-docutilsUpgrade python3-pygmentsUpgrade python3-wheel-wheelUpgrade python-sqlalchemy-docUpgrade python3-sqlalchemyUpgrade python-pymongo-docUpgrade python-virtualenv-docUpgrade python36-rpm-macrosUpgrade python3-pymongo-gridfsUpgrade python36-develUpgrade python3-PyMySQLUpgrade python36Upgrade python3-scipy | Oct 15, 2026 | Oct 14, 2026 |
| Amazon_linux_2023 | — | Upgrade python-pymongo-debugsourceUpgrade python3-pymongo-debuginfoUpgrade python3-pymongoUpgrade python3-bsonUpgrade python-pymongo-docUpgrade python-pymongo-debuginfoUpgrade python3-bson-debuginfoUpgrade python3-pymongo-gridfs | Sep 30, 2026 | Sep 10, 2026 |
| Redhat_linux | — | Upgrade python3-pymongoUpgrade python3-wheel-wheelUpgrade python3-noseUpgrade python-virtualenv-docUpgrade python3-virtualenvUpgrade python3-PyMySQLUpgrade python3-distroUpgrade python3-scipy-debuginfoUpgrade python36-rpm-macrosUpgrade python36-debugUpgrade python36Upgrade python3-docutilsUpgrade python3-bson-debuginfoUpgrade python3-docsUpgrade scipy-debugsourceUpgrade python3-bsonUpgrade python-nose-docsUpgrade python3-pymongo-gridfsUpgrade python3-pymongo-debuginfoUpgrade python-pymongo-debuginfoUpgrade python3-scipyUpgrade python3-wheelUpgrade python-pymongo-docUpgrade python-pymongo-debugsourceUpgrade python3-pygmentsUpgrade python3-sqlalchemyUpgrade python-sqlalchemy-docUpgrade python36-devel | Sep 18, 2026 | Sep 10, 2026 |
| Rocky_linux | — | Upgrade scipy-debugsourceUpgrade python3-scipyUpgrade python3-pymongoUpgrade python-pymongo-debuginfoUpgrade python36-debugUpgrade python36-develUpgrade python-pymongo-debugsourceUpgrade python3-bson-debuginfoUpgrade python3-scipy-debuginfoUpgrade python36Upgrade python3-bsonUpgrade python3-sqlalchemyUpgrade python3-pymongo-gridfsUpgrade python3-pymongo-debuginfo | Oct 16, 2026 | Oct 15, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub