CVE-2025-10060

Name of the Vulnerable Software and Affected Versions MongoDB Server versions prior to 6.0.25 MongoDB Server versions prior to 7.0.22 MongoDB Server versions prior to 8.0.12

Description MongoDB Server may allow upsert operations retried within a transaction to violate unique index constraints, potentially causing an invariant failure and server crash during commit. This issue may be triggered by improper WriteUnitOfWork state management.

Recommendations Upgrade MongoDB Server to version 6.0.25 or later. Upgrade MongoDB Server to version 7.0.22 or later. Upgrade MongoDB Server to version 8.0.12 or later.