PT-2025-36329 · Mongodb+1 · Mongodb Server+2

CVE-2025-10059

·

Published

2025-09-05

·

Updated

2025-10-30

CVSS v2.0

6.8

Medium

VectorAV:N/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions MongoDB Server versions prior to 6.0.x MongoDB Server versions prior to 7.0.18 MongoDB Server versions prior to 8.0.6
Description An improper setting of the lsid field on any sharded query can cause a crash in MongoDB routers. This issue occurs when a generic argument (lsid) is provided in a case when it is not applicable.
Recommendations Update MongoDB Server to version 6.0.x or later. Update MongoDB Server to version 7.0.18 or later. Update MongoDB Server to version 8.0.6 or later.

Exploit

Fix

DoS

Incorrect Permission

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-732

Related Identifiers

BDU:2025-13816
BIT-MONGODB-2025-10059
CVE-2025-10059

Affected Products

Mongodb Server
Mongodb
Red Os