← CVE Intelligence

CVE-2026-25612

Internal ResourceId collision may affect unrelated collections PUBLISHED

Description (CNA)

The internal locking mechanism of the MongoDB server uses an internal encoding of the resources in order to choose what lock to take. Collections may inadvertently collide with one another in this representation causing unavailability between them due to conflicting locks.

Affected (CNA)

Vendor / productVersions
MongoDB Inc / MongoDB Serveraffected 8.2 before 8.2.4; affected 8.0 before 8.0.18; affected 7.0 before 7.0.29

CWE

CWE-412

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.