Race Condition Vulnerability in MongoDB Server

CVE-2026-89099

What is CVE-2026-89099?

A race condition in the document value layer of MongoDB Server enables multiple concurrent server threads to access the same internal memory space without proper synchronization. This flaw permits an authenticated user with basic read-write database privileges to exploit the condition via the standard client protocol. The exploitation can result in server termination and may corrupt process memory with user-influenced content. The implications of this issue can adversely affect the confidentiality, integrity, and availability of the affected MongoDB server.

References