CVE-2026-13072

Name of the Vulnerable Software and Affected Versions MongoDB (affected versions not specified)

Description Insufficient validation of externally sourced BSON (Binary JSON) data during aggregation pipeline processing on a standalone mongod instance can lead to memory corruption. This may result in process termination or other unintended behavior. This issue occurs only when compute mode is enabled, which is a non-default configuration requiring explicit enablement at startup.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.