CVE-2026-9746 — Server crashes in case of the use of exchange

CVE-2026-9746

Server crashes in case of the use of exchange PUBLISHED

Description (CNA)

When using $changestreams and $_requestReshardingResumeToken with the exchange option the server hits an invariant which causes the server to crash. There are no special privileges needed. The user must be logged in to issue the statement.

Affected (CNA)

Vendor / product	Versions
MongoDB / MongoDB Server	affected 8.3.0 before 8.3.3; affected 8.2.0 before 8.2.10; affected 8.0.0 before 8.0.24; affected 7.0.0 before 7.0.35

CWE

CWE-617

References

https://jira.mongodb.org/browse/SERVER-124190

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.