CVE-2025-10059

Name of the Vulnerable Software and Affected Versions MongoDB Server versions prior to 6.0.x MongoDB Server versions prior to 7.0.18 MongoDB Server versions prior to 8.0.6

Description An improper setting of the lsid field on any sharded query can cause a crash in MongoDB routers. This issue occurs when a generic argument (lsid) is provided in a case when it is not applicable.

Recommendations Update MongoDB Server to version 6.0.x or later. Update MongoDB Server to version 7.0.18 or later. Update MongoDB Server to version 8.0.6 or later.