CVE-2026-104004 — Collection validators using collation-accepting expressions can crash MongoDB Server on insert

CVE-2026-104004

Collection validators using collation-accepting expressions can crash MongoDB Server on insert PUBLISHED

Description (CNA)

MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is later inserted. The behavior can occur for authenticated users with write access.

Affected (CNA)

Vendor / product	Versions
MongoDB / MongoDB Server	affected 8.3.0 before 8.3.13; affected 8.0 before 8.0.34; affected 9.0 before 9.0.4

CWE

CWE-476

References

https://jira.mongodb.org/browse/SERVER-131412

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.