CVE-2026-82067 — Improper Case Sensitivity Handling in MongoDB Server Configuration Validation May Cause Authorization to Remain Disab…

CVE-2026-82067

Improper Case Sensitivity Handling in MongoDB Server Configuration Validation May Cause Authorization to Remain Disabled at Startup PUBLISHED

Description (CNA)

Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default disabled state during server startup. An unauthenticated user with network access to a deployment where this condition occurs can perform arbitrary administrative operations, resulting in full impact of data confidentiality, integrity, and availability.

Affected (CNA)

Vendor / product	Versions
MongoDB / MongoDB Server	affected 8.3.0 before 8.3.9; affected 8.0.0 before 8.0.30; affected 7.0.0 before 7.0.41

CWE

CWE-178

References

https://jira.mongodb.org/browse/SERVER-131229

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.