CVE-2026-18707 — Improper Input Validation in MongoDB Aggregation Command Handling Leads to Denial of Service

CVE-2026-18707

Improper Input Validation in MongoDB Aggregation Command Handling Leads to Denial of Service PUBLISHED

Description (CNA)

An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the server process to terminate unexpectedly by submitting a specially formed aggregation command. This could result in a denial of service.

Affected (CNA)

Vendor / product	Versions
MongoDB / MongoDB Server	affected 8.3.0 before 8.3.8

CWE

CWE-617

References

https://jira.mongodb.org/browse/SERVER-128482

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.