PT-2026-25907 · Mongodb · Mongodb Server+1
Publicado
2026-03-17
·
Atualizado
2026-05-13
·
CVE-2026-4148
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
MongoDB Server (affected versions not specified)
Description
A use-after-free issue can occur in sharded clusters when a user with read access submits a specifically designed aggregation pipeline using either the
$lookup or $graphLookup operators. This issue is triggered by a flaw in the classic engine's handling of these aggregation operations. A use-after-free condition arises when memory is accessed after it has been freed, potentially leading to unpredictable behavior or crashes. The $lookup operator allows joining data from multiple collections, while the $graphLookup operator is used for recursive queries within a collection. The vulnerability is triggered when these operators are used within a specially crafted aggregation pipeline.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Mongodb Server
Mongodb