Memory Management Flaw in MongoDB C Driver Leading to Application Unavailability

CVE-2026-120678

What is CVE-2026-120678?

A flaw in the MongoDB C Driver's memory management can allow an unauthenticated user to exploit database endpoints and trigger unbounded memory growth in applications. This can lead to application instability and potential unavailability, as memory is not released properly during operations involving compressed responses. The vulnerability does not require authentication or transport security settings, making it particularly concerning for deployed applications.

References