Resource Exhaustion Vulnerability in MongoDB from Deeply Nested JSON Queries

CVE-2026-13064

What is CVE-2026-13064?

A vulnerability exists in MongoDB where specific query operations using complex, deeply nested JSON schema constructs can lead to substantial CPU consumption. This situation may result in resource exhaustion, as the operation becomes CPU-bound and cannot be halted through conventional administrative controls, potentially impacting overall system performance.

References