Read the docs
TI-2026-63846 Aliases CVE-2026-96749GHSA-v4x9-3549-crwv

Heap out-of-bounds write via signed size overflow in BSON document encoding

Priority LOW 34CWE-190Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
Present
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 2 fixed, 4 without a fix

Attack profile from CVSS 4.0 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-190 and the CVSS impact.

Summary

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch the overflow is written in a form whose behavior is not defined by the C language standard. A party with no privileges who can place a very large value into data that an application encodes may, depending on how the native extension was built, cause a write outside the bounds of an allocated buffer inside the application's own process.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00188 8th percentileScored 2026-11-07
Fix Partial Python Driver (MongoDB): 4.18.2pymongo (PyPI): 4.18.2Red Hat: 2 advisoriesRed Hat: 2 fixed, 4 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MongoDBPython Driver1.9.0 to before 4.18.24.18.2Patch availableCNA
—pymongo (PyPI)before 4.18.24.18.2Patch availableGHSA-v4x9-3549-crwv
  • Python Driver VendorMongoDB Affected 1.9.0 to before 4.18.2 Fixed in 4.18.2 Patch available CNA
  • pymongo (PyPI) Vendor— Affected before 4.18.2 Fixed in 4.18.2 Patch available GHSA-v4x9-3549-crwv

Remediation

  • Fix · CNA Python Driver (MongoDB) Fixed in 4.18.2
  • Fix · GHSA-v4x9-3549-crwv pymongo (PyPI) Fixed in 4.18.2 Advisory →

Red Hat 2 advisories

  • RHSA-2026:87410 Released 2026-10-21 · Red Hat rating Critical
    RHOAI 2.25.12 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-codeflare-operator-rhel9 +47
  • RHSA-2026:86891 Released 2026-10-21 · Red Hat rating Critical
    RHOAI 3.5.2 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-cli-rhel9 +47

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    MongoDB Python Driver 4.18.2

    3 records Highest priority Priority LOW 3 LOW

    Other records, highest priority first

    • TI-2026-63845 Connection redirection via percent-encoded delimiter injection in connection string hostsPriority LOW 36
    • TI-2026-63844 Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryptionPriority LOW 23
    Show all 3 records →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 8AffectedNo fix yet
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenStack Platform 13 (Queens)AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 17.1AffectedNo fix yet
Red Hat OpenShift AI 2.25Fixed RHSA-2026:87410
Red Hat OpenShift AI 3.5Fixed RHSA-2026:86891
Not affected: 3 products
  • Red Hat OpenShift AI 2.25
  • Red Hat OpenShift AI 3.5
  • Red Hat OpenStack Platform 16.2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-96749
  2. 2026-10-06 Alias added: GHSA-v4x9-3549-crwv
  3. 2026-10-06 Fix available: PyPI/[email protected] · GHSA-v4x9-3549-crwv
  4. 2026-10-06 CVSS score added · GHSA-v4x9-3549-crwv
  5. 2026-10-06 Weakness changed · GHSA-v4x9-3549-crwv
  6. 2026-10-06 9 new references · GHSA-v4x9-3549-crwv
  7. 2026-10-15 Affected versions changed · Red Hat
  8. 2026-10-21 Affected versions changed · Red Hat
  9. 2026-10-22 Fix available: RHSA-2026:86891 · Red Hat
  10. 2026-10-22 Fix available: RHSA-2026:87410 · Red Hat
  11. 2026-10-23 Fix available: Red Hat OpenShift AI 2.25, Red Hat OpenShift AI 3.5 · Red Hat

References

Advisory 1

Other 8

  • TI-2019-08023 Code injection in mongo-express KEVCVSS 3.1CRITICAL 9.9
  • TI-2025-13542 Zlib compressed protocol header length confusion may allow memory read KEVCVSS 4.0HIGH 8.7
  • TI-2026-79432 BSON output corruption via out-of-range binary subtype in MongoDB C# Driver CVSS 4.0MEDIUM 6.9
  • TI-2026-79424 NoSQL command injection via mismatched BSON length in MongoDB C# Driver CVSS 4.0MEDIUM 6.9
  • TI-2026-79422 Unbounded memory growth in MongoDB C# Driver BSON deserialization CVSS 4.0HIGH 8.2
  • TI-2026-79427 Authentication bypass via issuer-and-serial-only certificate equality CVSS 4.0HIGH 7.6
See all 376 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences