Heap Out-of-Bounds Read Vulnerability in MongoDB Server by MongoDB

CVE-2026-82066

What is CVE-2026-82066?

A security issue has been identified in the query planning component of MongoDB Server, where an authenticated user with database read and write privileges can exploit a heap out-of-bounds read condition. This vulnerability can be triggered through specially crafted query operations, allowing the server to read memory outside the boundaries of the allocated buffers. As a result, sensitive data may be exposed in the diagnostic logging, presenting a significant risk to data confidentiality.

References