CVE-2026-9748

Name of the Vulnerable Software and Affected Versions MongoDB (affected versions not specified)

Description A denial of service occurs when the $ internalConvertBucketIndexStats stage uses PauseExecution to signal that a document should be skipped following a failed index stats conversion. PauseExecution is a TeeBuffer-internal signal intended exclusively for the $facet stage to coordinate sub-pipelines. If the $ internalConvertBucketIndexStats stage is positioned before the $facet stage in a pipeline, the TeeBuffer receives this unexpected signal, triggering a hard invariant assertion that crashes the mongod process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.