Race Condition Vulnerability in MongoDB Server Text Index Query Parsing

CVE-2026-82056

What is CVE-2026-82056?

A race condition in the MongoDB server's text index query parsing can lead to a heap use-after-free read. This occurs during specific concurrent operations related to text-search and index management. When an authenticated user with readWrite privileges executes these operations, there's a risk of accessing freed internal text index metadata, which may cause the MongoDB server to crash. Consequently, this results in a denial of service for all connected clients, impacting overall system availability.

References