PT-2026-87161
CVE-2026-82068
·
Published
2026-09-08
·
Updated
2026-09-17
Description by
CVSS 4.0
7.1
HighMetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
MongoDB Server (affected versions not specified)
Description
An authenticated user with write privileges can trigger a persistent fatal assertion crash by sending specially crafted retryable write commands. The crash state is durably persisted, which leads to the server process repeatedly crashing upon restart and may propagate to other nodes within a sharded cluster. Restoring service availability requires manual intervention.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾