← CVE Intelligence

CVE-2026-9747

Crafted cross-shard merge aggregation crashes MongoDB Server PUBLISHED

Description (CNA)

Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server.

Affected (CNA)

Vendor / productVersions
MongoDB / MongoDB Serveraffected 8.3.0 before 8.3.3; affected 8.2.0 before 8.2.10; affected 8.0.0 before 8.0.24; affected 7.0.0 before 7.0.35

CWE

CWE-617

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.