PT-2026-144620
CVE-2026-120821
·
Published
2026-11-10
·
Updated
2026-11-10
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
MongoDB Server versions prior to 9.0.7
Description
A use-after-free issue exists in the aggregation framework of MongoDB Server. This occurs when specific expressions are evaluated within an aggregation sub-pipeline. An authenticated user with read privileges can trigger this condition, which may lead to the server terminating unexpectedly, resulting in a denial of service.
Recommendations
Update to version 9.0.7.
Found an issue in the description? Have something to add? Feel free to write us 👾