Update dependency pymongo to v4.18.2 [SECURITY] - autoclosed

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
pymongo	4.18.0 → 4.18.2

---

pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods

CVE-2026-88029 / GHSA-8fvv-fgr5-f8ch

More information

Details

Impact

When reading/writing via an ID with the GridFS API, require an exact match on the given ID. Otherwise, if a Hash is given in place of the ID, it may be interpreted as criteria, overriding the ID match.

Patches

Patch available in pymongo >= 4.18.1

Workarounds

Ensure your existing workflow only supports exact matching on the GridFS API.

Severity

• CVSS Score: 6.1 / 10 (Medium)
• Vector String: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N

References

• https://github.com/mongodb/mongo-python-driver/security/advisories/GHSA-8fvv-fgr5-f8ch
• https://nvd.nist.gov/vuln/detail/CVE-2026-88029
• https://github.com/mongodb/mongo-python-driver/pull/3046
• https://github.com/mongodb/mongo-python-driver/commit/3ef1c607859589a0086446ad6f557791a2813681
• https://github.com/mongodb/mongo-python-driver/commit/fa676586ba4b399168a4d1d41c30dc2166cc44fd
• https://github.com/mongodb/mongo-python-driver/releases/tag/4.18.1
• https://jira.mongodb.org/browse/PYTHON-5992
• https://github.com/advisories/GHSA-8fvv-fgr5-f8ch

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

---

PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption

CVE-2026-96747 / GHSA-qx36-8mw2-4r3x

More information

Details

Summary

PyMongo passed the KMS endpoint of a data key verbatim into parse_host(), which returns any string ending in .sock unchanged instead of validating it as a hostname and port. The driver's connection code then treats such an address as a Unix domain socket path and connects to it with AF_UNIX. Because the endpoint originates from masterKey.endpoint in a key vault document, a party who can write to the key vault could redirect the driver's KMS connection to an arbitrary Unix domain socket path on the application host.

Impact

An application using client-side field level encryption (CSFLE) or Queryable Encryption is affected if an attacker can write to its key vault collection. Setting masterKey.endpoint on a data key to a .sock-suffixed string causes the next KMS request for that key (key cache TTL is ~60 seconds) to open an AF_UNIX connection to the attacker-chosen filesystem path from inside the victim application process. The documented custom KMS endpoint feature supports TCP hosts only, so this crosses a boundary the feature was never intended to allow.

Impact is limited to the side effects of the connection itself. The socket is still wrapped in a verifying TLS context using the .sock string as server_hostname, and insecure KMS TLS options are rejected, so the handshake always fails and the KMS message is never sent. The attacker controls the connect target but not the transmitted bytes (a fixed TLS ClientHello).

Applications that do not use CSFLE or Queryable Encryption are not affected. Applications whose key vault is not writable by untrusted parties are not affected.

Patches

Fixed in PyMongo 4.18.2 _EncryptionIO.kms_request now rejects a .sock-suffixed KMS endpoint with pymongo.errors.ConfigurationError immediately after parsing, before any connection is attempted, on both the synchronous and asynchronous paths. No application code changes are required beyond upgrading.

Workarounds

If you cannot upgrade immediately:

• Restrict write access to the key vault collection to trusted principals only. This is the recommended configuration regardless of this issue.
• Validate masterKey.endpoint on data keys you create, and audit existing key vault documents for endpoints ending in .sock.

Details

• _EncryptionIO.fetch_keys reads key vault documents from the server and hands them to libmongocrypt, which surfaces the stored masterKey.endpoint verbatim as kms_context.endpoint.
• _EncryptionIO.kms_request passed that string to parse_host(endpoint, 443). parse_host returns entities ending in .sock verbatim, skipping the hostname and port validation applied to every other input.
• _create_connection (and the async equivalent) checks host.endswith(".sock") and performs an AF_UNIX sock.connect(host), treating the string as a filesystem path.

Severity

• CVSS Score: 5.3 / 10 (Medium)
• Vector String: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N

References

• https://github.com/mongodb/mongo-python-driver/security/advisories/GHSA-qx36-8mw2-4r3x
• https://nvd.nist.gov/vuln/detail/CVE-2026-96747
• https://github.com/mongodb/mongo-python-driver/pull/3066
• https://github.com/mongodb/mongo-python-driver/commit/44119d0f9dfa0224d84b03be702a6d9a5ef1dea7
• https://github.com/mongodb/mongo-python-driver/commit/640dd2383a1a2fb1a10e5222d50ebc0b22a61bd7
• https://github.com/mongodb/mongo-python-driver/blob/4.18.2/doc/changelog.rst
• https://github.com/mongodb/mongo-python-driver/releases/tag/4.18.2
• https://www.mongodb.com/community/forums/t/pymongo-4-18-2-released/343732
• https://github.com/advisories/GHSA-qx36-8mw2-4r3x

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

---

PyMongo: PYTHON-5986 Host injection in PyMongo connection string parsing via percent-encoded delimiters

CVE-2026-96748 / GHSA-vp6j-j7w5-5xjj

More information

Details

Summary

PyMongo percent-decoded the entire host section of a connection string before splitting it into individual host:port entries. A percent-encoded , or : in a hostname therefore decoded into a real delimiter, injecting an additional attacker-chosen host and port into the client's seed list.

Impact

An application that interpolates untrusted input into a MongoDB connection string -- for example, a tenant name or hostname fragment taken from a request -- could be made to add an attacker-controlled server to the seed list. Because %2C and %3A survive most URL-safety checks and only become delimiters inside PyMongo's parser, input that looks like a single hostname to the application becomes two hosts to the driver. The client may then perform topology discovery and authentication against the attacker's host, exposing credentials, or route operations to it.

Unix domain socket paths, the only host identifiers that legitimately require percent-encoding, are not affected.

Patches

Fixed in PyMongo 4.18.2. Percent-decoding was moved into split_hosts and now applies only to Unix domain socket paths, identified by an unescaped .sock suffix before decoding, and only after splitting on ,.

Workarounds

Do not interpolate untrusted input into the host portion of a connection string. If unavoidable, reject or percent-decode-and-validate the value before building the URI.

Details

The decoding was introduced in PyMongo 3.5.0 (PYTHON-1282), where unquote_plus was applied to the whole host section in _validate_uri and, later, _parse_srv, before the string was split on , and :.

Severity

• CVSS Score: 8.3 / 10 (High)
• Vector String: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N

References

• https://github.com/mongodb/mongo-python-driver/security/advisories/GHSA-vp6j-j7w5-5xjj
• https://nvd.nist.gov/vuln/detail/CVE-2026-96748
• https://github.com/mongodb/mongo-python-driver/pull/3066
• https://github.com/mongodb/mongo-python-driver/commit/1e7a56db4649b14c4c9a6ac20aa4a8d0d1bb238a
• https://github.com/mongodb/mongo-python-driver/commit/640dd2383a1a2fb1a10e5222d50ebc0b22a61bd7
• https://github.com/mongodb/mongo-python-driver/blob/4.18.2/doc/changelog.rst
• https://github.com/mongodb/mongo-python-driver/releases/tag/4.18.2
• https://www.mongodb.com/community/forums/t/pymongo-4-18-2-released/343732
• https://github.com/advisories/GHSA-vp6j-j7w5-5xjj

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

---

PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding

CVE-2026-96749 / GHSA-v4x9-3549-crwv

More information

Details

An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is performed in a signed 32-bit type, and the guard meant to catch the overflow is written in a form whose behavior is not defined by the C language standard. A party with no privileges who can place a very large value into data that an application encodes may, depending on how the native extension was built, cause a write outside the bounds of an allocated buffer inside the application's own process.

Severity

• CVSS Score: 7.5 / 10 (High)
• Vector String: CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References

• https://github.com/mongodb/mongo-python-driver/security/advisories/GHSA-v4x9-3549-crwv
• https://nvd.nist.gov/vuln/detail/CVE-2026-96749
• https://github.com/mongodb/mongo-python-driver/pull/3066
• https://github.com/mongodb/mongo-python-driver/commit/640dd2383a1a2fb1a10e5222d50ebc0b22a61bd7
• https://github.com/mongodb/mongo-python-driver/commit/6ab44be0e97c9d1d5a23725c4978fb25f3249485
• https://github.com/mongodb/mongo-python-driver/blob/4.18.2/doc/changelog.rst
• https://github.com/mongodb/mongo-python-driver/releases/tag/4.18.2
• https://www.mongodb.com/community/forums/t/pymongo-4-18-2-released/343732
• https://github.com/advisories/GHSA-v4x9-3549-crwv

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

---

Release Notes

mongodb/mongo-python-driver (pymongo)

v4.18.2: PyMongo 4.18.2

Compare Source

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-18-2-released/343732

CVE-2026-96749
CVE-2026-96748
CVE-2026-96747

v4.18.1: PyMongo 4.18.1

Compare Source

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-18-1-released/343338

---

Configuration

📅 Schedule: (in timezone Etc/UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.