CVE-2026-13063

Name of the Vulnerable Software and Affected Versions MongoDB (affected versions not specified)

Description An authenticated user with standard read/write privileges can cause the mongod process to terminate by sending a crafted aggregation command. This occurs because the libmongocrypt library insufficiently validates values supplied in the payload, leading to an excessively large memory allocation and a subsequent out-of-memory condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.