CVE-2026-103546 — Improper validation of Ops Manager configuration in MongoDB Kubernetes Operator

CVE-2026-103546

Improper validation of Ops Manager configuration in MongoDB Kubernetes Operator PUBLISHED

Description (CNA)

In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation.

Affected (CNA)

Vendor / product	Versions
MongoDB, Inc. / Mongodb Controllers for Kubernetes	affected 0 before 1.13.0

CWE

CWE-918

References

https://github.com/mongodb/mongodb-kubernetes/releases/tag/1.13.0

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.