Stack Overflow Vulnerability in MongoDB Server Impacting Specific Versions

CVE-2025-6710

What is CVE-2025-6710?

MongoDB Server is potentially vulnerable to a stack overflow due to issues in its JSON parsing mechanism. Specifically crafted JSON inputs can trigger excessive recursion, leading to significant stack space consumption. This can result in a crash of the server, which may happen even before user authentication is performed. For authenticated users, there remains a risk of denial of service in MongoDB Server v6.0. Organizations using versions prior to 6.0.21, 7.0.17, and 8.0.5 should prioritize patching to mitigate this vulnerability.

References