Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the identifier passed by an affected application may obtain stored file content beyond the intended target or cause all GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable. The affected rename operation may also rename a stored file other than the intended target.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2086:01 advisory.

    * pymongo: MongoDB Python Driver: Data disclosure and denial of service via query-operator injection     (CVE-2026-88029)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-82858 advisory.

    - Fix CVE-2021-27291: ReDos via crafted malicious input     Resolves: rhbz#1943459 rhbz#1943460

    python-pymongo
    - Backport CVE-2026-88029

    python-PyMySQL
    - Security fix for CVE-2024-53899     Resolves: RHEL-68876

    python-wheel

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:82858 advisory.

    * pymongo: MongoDB Python Driver: Data disclosure and denial of service via query-operator injection     (CVE-2026-88029)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2026_82858 advisory.

    * pymongo: MongoDB Python Driver: Data disclosure and denial of service via query-operator injection     (CVE-2026-88029)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:82858 advisory.

    * pymongo: MongoDB Python Driver: Data disclosure and denial of service via query-operator injection     (CVE-2026-88029)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:82858 advisory.

    Python is an interpreted, interactive, object-oriented programming language, which includes modules,     classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to     many system calls and libraries, as well as to various windowing systems.

    Security Fix(es):

    * pymongo: MongoDB Python Driver: Data disclosure and denial of service via query-operator injection     (CVE-2026-88029)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB
    Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query
    condition rather than as a literal identifier. An authenticated user who can influence the identifier
    passed by an affected application may obtain stored file content beyond the intended target or cause all
    GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable. The
    affected rename operation may also rename a stored file other than the intended target. (CVE-2026-88029)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3121 advisory.

    Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB     Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query     condition rather than as a literal identifier. An authenticated user who can influence the identifier     passed by an affected application may obtain stored file content beyond the intended target or cause all     GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable. The     affected rename operation may also rename a stored file other than the intended target. (CVE-2026-88029)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB     Python Driver can cause a caller-supplied structured file identifier to be interpreted as a query     condition rather than as a literal identifier. An authenticated user who can influence the identifier     passed by an affected application may obtain stored file content beyond the intended target or cause all     GridFS file chunks in the affected bucket to be removed, rendering stored file content unreadable. The     affected rename operation may also rename a stored file other than the intended target. (CVE-2026-88029)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
367259	MiracleLinux 8 : python36:3.6 (AXSA:2026-2086:01)	Nessus	Miracle Linux Local Security Checks	Local	medium
366666	Oracle Linux 8 : python36:3.6 (ELSA-2026-82858)	Nessus	Oracle Linux Local Security Checks	Local	medium
366101	AlmaLinux 8 : python36:3.6 (ALSA-2026:82858)	Nessus	Alma Linux Local Security Checks	Local	medium
366050	Rocky Linux 8 [CIQ] Security Update: python-nose-docs / python-pymongo-debuginfo / etc (crlsa-2026_82858)	Nessus	Rocky Linux Local Security Checks	Local	medium
366007	RockyLinux 8 : python36:3.6 (RLSA-2026:82858)	Nessus	Rocky Linux Local Security Checks	Local	medium
365910	RHEL 8 : python36:3.6 (RHSA-2026:82858)	Nessus	Red Hat Local Security Checks	Local	medium
473556	Echo: pymongo: security update to 4.18.1	Tenable Cloud Security	Echo Local Security Checks	Local	medium
473556	Echo: pymongo: security update to 4.18.1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
473489	Chainguard: multiple localstack packages: security update to 4.14.0-r29	Tenable Cloud Security	Chainguard Local Security Checks	Local	medium
473489	Chainguard: multiple localstack packages: security update to 4.14.0-r29	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	medium
472963	SCA: security update for pymongo (GHSA-8fvv-fgr5-f8ch)	Tenable Cloud Security	SCA Checks	Local	medium
472963	SCA: security update for pymongo (GHSA-8fvv-fgr5-f8ch)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
351033	Amazon Linux 2023 : python3-bson, python3-pymongo, python3-pymongo-gridfs (ALAS2023-2026-3121)	Nessus	Amazon Linux Local Security Checks	Local	medium
344690	Linux Distros Unpatched Vulnerability : CVE-2026-88029	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-88029

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium