PT-2026-63475 · Mongodb · Mongodb

CVE-2026-13071

·

Published

2026-07-22

·

Updated

2026-08-19

CVSS v4.0

7.1

High

VectorAV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions mongod (affected versions not specified)
Description An authenticated user with read access can cause the mongod process to terminate. This occurs when specific aggregation expressions that execute server-side JavaScript are used, leading to improper memory handling during document processing.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-416

Related Identifiers

BIT-MONGODB-2026-13071
CVE-2026-13071

Affected Products

Mongodb