CVE-2026-88026: Regular expression injection via unescaped characters in LINQ query translation in MongoDB C# Driver
Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C# Driver can cause a caller-supplied character sequence to alter a regular-expression predicate generated by an affected application. An authenticated user who can influence such a value may cause the application to return records beyond those intended by the original filter.
Affected Software
Event History
Frequently Asked Questions
Can this be exploited by an unauthenticated remote attacker?
No. Exploitation requires an authenticated user who can influence a value used in a LINQ query that is translated into a regular-expression predicate.
What is the expected impact if exploitation succeeds?
The affected application may return records outside the scope intended by the original filter. The provided severity vector indicates confidentiality impact only, with no stated integrity or availability impact.