MEDIUM 5.7 NVD

CVE-2026-84962

An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized

An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption.

References

https://jira.mongodb.org/browse/MONGOCRYPT-960

Published: 2026-09-03 · Source: NVD · Feed updated: 2026-09-03

This medium severity vulnerability with a CVSS score of 5.7 was published on 2026-09-03 via NVD.

vulnfeed aggregates 7617 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.