CVE-2026-8199 | BDVDB-2026-332879 Detail
MongoDBMongoDB Server
Description#
An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear. This contributes to memory pressure and may lead to availability loss by OOM. This issue impacts MongoDB Server v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact high. Attack vector: network.
Weaknesses#
- CWE-1325 Improperly Controlled Sequential Memory Allocation
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.