CVE-2025-3084

Name of the Vulnerable Software and Affected Versions MongoDB Server versions 5.0 prior to 5.0.31 MongoDB Server versions 6.0 prior to 6.0.20 MongoDB Server versions 7.0 prior to 7.0.16 MongoDB Server versions 8.0 prior to 8.0.4

Description The issue arises when the explain command is run with certain arguments set, causing a failure to validate these arguments before use. This can lead to crashes in router servers.

Recommendations For MongoDB Server versions 5.0 prior to 5.0.31, update to version 5.0.31 or later. For MongoDB Server versions 6.0 prior to 6.0.20, update to version 6.0.20 or later. For MongoDB Server versions 7.0 prior to 7.0.16, update to version 7.0.16 or later. For MongoDB Server versions 8.0 prior to 8.0.4, update to version 8.0.4 or later.