← Database

CVE-2025-11695

HIGH CVSS: 8.0 Published: 2025-10-13 Modified: 2026-06-17

Description

When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5

Affected Platforms

Mongodb Rust Driver

Weakness Type

CWE-295

References