PT-2026-144616

CVE-2026-120817

·

Published

2026-11-10

·

Updated

2026-11-10

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
A race condition in the schema validation component of MongoDB Server can occur when concurrent writes are checked against a collection validator that uses geospatial query operators. The condition can be caused by an authenticated user with write privileges, and may result in the server terminating unexpectedly.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization (\'Race Condition\')
Related identifiers
CVE-2026-120817
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com