MongoDB Server Vulnerability Affecting Collection Validation Feature
CVE-2026-104004
7.1HIGH
What is CVE-2026-104004?
MongoDB Server's collection validation feature may improperly manage certain expressions that are saved in its validator component. This flaw could lead to server crashes when an authenticated user attempts to insert a document under specific conditions. The issue exemplifies the critical need for robust validation mechanisms to prevent disruptions in service and ensure seamless data operations.
Affected Version(s)
MongoDB Server 8.3.0 < 8.3.13
MongoDB Server 8.0 < 8.0.34
MongoDB Server 9.0 < 9.0.4