CVE-2026-82056

Name of the Vulnerable Software and Affected Versions MongoDB server (affected versions not specified)

Description A race condition in text index query parsing can cause a heap use-after-free read during the handling of upsert retry paths. This occurs when concurrent index lifecycle operations lead to a raw pointer to internal text index metadata being dereferenced after the underlying structures are freed, causing a server crash. An authenticated user with readWrite privileges can trigger this state through concurrent text-search and index management operations, resulting in a denial of service for all connected clients. A heap use-after-free is a memory corruption issue where a program continues to use a pointer after the memory it points to has been released.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.