CVE-2026-82071

Name of the Vulnerable Software and Affected Versions MongoDB Server (affected versions not specified)

Description Insufficient validation of storage engine configuration options allows an authenticated user with write privileges to provide crafted parameters during collection creation. This action overrides internal storage metadata, leading to an out-of-bounds memory write in the server process. This can result in a denial of service through a server crash or potentially allow arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.