CVE-2026-18709

Name of the Vulnerable Software and Affected Versions MongoDB Server (affected versions not specified)

Description An issue allows an authenticated user with direct network access to a shard to improperly commit or abort an in-progress prepared transaction. This bypasses the intended transaction coordination process, which can lead to cross-shard data inconsistency, cluster clock corruption, and a violation of transaction atomicity guarantees. Transaction atomicity ensures that a series of database operations either all succeed or all fail, leaving the database in a consistent state.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.