Beveiligingsadvies

CVE-2026-13067

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-22 19:16:38

Laatst bijgewerkt 2026-07-24 03:56:10

Toegewezen door mongodb

CVSS-score 7.2

Status PUBLISHED

Beschrijving

When PROXY protocol v2 is used on the Unix domain socket path, roles derived from X.509 client certificates may not be validated against the configured tlsCATrusts allow-list. This can result in unintended role assignments following MONGODB-X509 authentication. Affected scenarios require local access to the proxy Unix domain socket and a valid X.509 certificate issued by a trusted certificate authority.

← Alle CVE's bekijken Bekijk op cve.org ↗