CVE-2026-13058

Name of the Vulnerable Software and Affected Versions mongod (affected versions not specified)

Description An authenticated user with basic write privileges can cause the mongod process to terminate abnormally by sending a crafted transaction command with an incomplete set of required fields. This issue is caused by inconsistent validation across related transaction command parameters, which leads to a fatal internal invariant failure and a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.