CVE-2026-96747

The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an application using the driver to open connections to local sockets on the application host. Data sent over these connections is limited to the start of a TLS handshake, so no chosen content is transmitted.

• CWE-918

• https://github.com/mongodb/mongo-python-driver/blob/4.18.2/doc/changelog.rst
• https://github.com/mongodb/mongo-python-driver/releases/tag/4.18.2
• https://github.com/mongodb/mongo-python-driver/security/advisories/GHSA-qx36-8mw2-4r3x

Published

Sep 24, 2026

Last Modified

Sep 24, 2026

Status

Awaiting Analysis

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-9673Versions of the package json-2-csv from 3.15.0 and before 5.…6.8
• CVE-2026-96739A flaw has been found in SEMCMS up to 4.2. Affected by this …4.3
• CVE-2026-9674A cross-site request forgery (CSRF) vulnerability in Jenkins…4.3
• CVE-2026-96744Improper neutralization of special elements in data query lo…7.1
• CVE-2026-96745Deserialization of untrusted data in the command monitoring …5.6
• CVE-2026-96746An out-of-bounds write in the connection-monitoring logic of…6.5
• CVE-2026-96748PyMongo's connection string parsing decodes percent-encoded …6.5
• CVE-2026-96749An integer overflow in the BSON document encoding component …8.4
• CVE-2026-9675Impact: The undici WebSocket client enforces maxPayloadSize …7.5
• CVE-2026-96750MongoDB Compass can interpolate a database name without esca…7.1
• CVE-2026-96751A vulnerability has been found in pmTicket Project-Managemen…7.3
• CVE-2026-96752The Zero Spam for WordPress plugin for WordPress is vulnerab…7.2