CVE-2026-6231

OVERVIEW CVE-2026-6231 is a validation bypass vulnerability in the MongoDB C Driver's bson_validate function. The flaw causes the function to return early on specific inputs and incorrectly report successful validation, allowing malformed BSON data and invalid UTF-8 sequences to bypass security checks. This affects MongoDB C Driver versions prior to 1.30.5 and versions 2.0.0 through 2.0.1. Applications relying on this function to validate untrusted BSON data before processing are at risk of processing corrupted or malicious input. SEVERITY The vulnerability carries a CVSS 3.1 score of 4.3 (Medium), with network-based access, low attack complexity, and a requirement for low privilege authentication. The primary impact is integrity violation, as malformed data can be processed without detection. The attack does not compromise confidentiality or availability. The EPSS score of 0.000470 indicates exceptionally low real-world exploitation probability, suggesting minimal threat actor interest. EXPLOITATION STATUS There is no evidence of active exploitation in the wild. The vulnerability does not appear on the CISA Known Exploited Vulnerabilities list and remains inactive on threat intelligence hot lists. No public exploit code is currently available. Given the low EPSS score and absence of community chatter, this appears to be a low-priority issue suitable for standard patching schedules rather than emergency remediation.