CVE-2026-103546

Summary

In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation.

Affected Software

VendorProductVersion RangeStatus
MongoDB, Inc.Mongodb Controllers for Kubernetes0 < 1.13.0affected

Weaknesses

  • CWE-918: CWE-918 Server-Side request forgery (SSRF)

References