A vulnerability classified as critical was found in MongoDB Ruby Driver up to 7.6.1/8.0.12/8.1.12/9.0.10. Affected is the function
Mongoid::Criteria. The manipulation results in privilege escalation.
This vulnerability is identified as CVE-2026-2302. The attack can be executed remotely. There is not any exploit available.
