Uncontrolled Resource Consumption Vulnerability in MongoDB Sharded-Cluster Router

CVE-2026-82075

What is CVE-2026-82075?

An uncontrolled resource consumption vulnerability exists in the MongoDB sharded-cluster router process. This weakness allows unauthorized clients with network access to the router port to exploit connection-monitoring parameters. By doing so, they can force the server to consume excessive CPU resources, potentially leading to a degradation or denial of service for legitimate clients. Notably, this vulnerability does not require any form of authentication, elevated privileges, or user interaction. While only the availability of the service is compromised, the confidentiality and integrity of data remain intact.

References