CVE-2026-120817

EUVD-2026-122833
A race condition in the schema validation component of MongoDB Server can occur when concurrent writes are checked against a collection validator that uses geospatial query operators. The condition can be caused by an authenticated user with write privileges, and may result in the server terminating unexpectedly.
Race Condition
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
mongodbCNA
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
mongodbmongodb
9.0.0 ≤
𝑥
< 9.0.7
CNA
mongodbmongodb
8.3.0 ≤
𝑥
< 8.3.16
CNA
mongodbmongodb
8.0.0 ≤
𝑥
< 8.0.37
CNA
mongodbmongodb
7.0.0 ≤
𝑥
< 7.0.48
CNA
Common Weakness Enumeration
References
https://jira.mongodb.org/browse/SERVER-135655