CVE-2026-18706

Name of the Vulnerable Software and Affected Versions MongoDB Server (affected versions not specified)

Description An issue in the $graphLookup aggregation stage allows an authenticated user with permissions to execute aggregation and memory-management commands to trigger a use-after-free condition. This occurs when an internal reference is accessed after the associated memory has been released, which may lead to a server crash or the execution of unintended code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.