Unique Index Violation in MongoDB Server by MongoDB

CVE-2025-10060

What is CVE-2025-10060?

MongoDB Server is susceptible to a vulnerability that may allow upsert operations, when retried within a transaction, to bypass unique index constraints. This issue can lead to invariant failures, resulting in server crashes during commit due to improper WriteUnitOfWork state management. It affects multiple versions of MongoDB Server, necessitating immediate attention to ensure the integrity and reliability of database operations. Users are advised to review product versions and apply the necessary updates.

References