Denial of Service Risk in MongoDB Server by Limited User Privileges
CVE-2025-13643

2.3LOW

Key Information:

Vendor

MongoDB
Status
Mongodb Server
Vendor
CVE Published:
25 November 2025

What is CVE-2025-13643?

A vulnerability in MongoDB Server allows a user with limited privileges to terminate running queries initiated by other users. This situation may lead to a denial of service, as it disrupts query execution for others, potentially impacting application performance and user experience. The flaw affects MongoDB Server versions 7.0 prior to 7.0.26 and 8.0 prior to 8.0.14, necessitating users to upgrade to the latest versions to mitigate the risks associated with this issue.

Affected Version(s)

MongoDB Server 8.0 < 8.0.14

MongoDB Server 7.0 < 7.0.26

References

https://jira.mongodb.org/browse/SERVER-103582

CVSS V4

Score:
2.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.