CVE-2025-11695

Configuration may unexpectedly disable certificate validation PUBLISHED

Description (CNA)

When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5

Affected (CNA)

Vendor / product	Versions
MongoDB / Rust Driver	affected 0 before v3.2.5

CWE

CWE-295

References

https://jira.mongodb.org/browse/RUST-2264

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.