Denial of Service Vulnerability in MongoDB's 2dsphere Index

CVE-2026-82055

What is CVE-2026-82055?

A vulnerability exists in MongoDB's 2dsphere index key generation, allowing an authenticated user with write access to insert a specially crafted GeoJSON document. This can lead to a server crash due to a null pointer dereference, resulting from an inconsistency in geometry parsing. When the internal object related to the index is improperly initialized, subsequent attempts to generate index keys can cause the mongod process to terminate unexpectedly, leading to service disruption.

References