Denial of Service Vulnerability in MongoDB Server by MongoDB, Inc.

CVE-2025-10061

What is CVE-2025-10061?

A vulnerability exists in MongoDB Server that allows an authorized user to induce a crash by executing a specially crafted $group query. This flaw arises from improper handling of certain accumulator functions when additional parameters are specified within the $group operation. If triggered repeatedly, this vulnerability can lead to a denial of service, impacting system availability. The issue affects multiple versions of MongoDB Server, necessitating prompt action to mitigate potential disruptions.

References