MongoDB Server Vulnerability Affecting Collection Validation Feature
CVE-2026-104004

7.1HIGH

Key Information:

Vendor

Mongodb

Vendor
CVE Published:
13 October 2026

What is CVE-2026-104004?

MongoDB Server's collection validation feature may improperly manage certain expressions that are saved in its validator component. This flaw could lead to server crashes when an authenticated user attempts to insert a document under specific conditions. The issue exemplifies the critical need for robust validation mechanisms to prevent disruptions in service and ensure seamless data operations.

Affected Version(s)

MongoDB Server 8.3.0 < 8.3.13

MongoDB Server 8.0 < 8.0.34

MongoDB Server 9.0 < 9.0.4

References

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.