PT-2026-25907 · Mongodb · Mongodb Server
Published
2026-03-17
·
Updated
2026-03-18
·
CVE-2026-4148
CVSS v3.1
8.8
High
| AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
ExpressionContext use-after-free in classic engine $lookup and $graphLookup aggregation operators
CVE: CVE-2026-4148
Vendor: Mongodb inc
Product: MongoDB Server
CVSS: 8.7
Credits: n/a
Description:
A use-after-free vulnerability can be triggered in sharded clusters by an authenticated user with the read role who issues a specially crafted $lookup or $graphLookup aggregation pipeline.
References:
• https://t.co/DM7Af7ta0O
• https://t.co/WFHhwBLP9o
#dbugs vuln
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Mongodb Server