CVE-2026-9748
EUVD-2026-3586409.06.2026, 23:17
The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this document" when an index stats conversion failed. But PauseExecution is not a general purpose skip mechanism, but rather a TeeBuffer-internal signal used solely by $facet to coordinate its sub-pipelines. When this stage is placed before $facet in a pipeline, TeeBuffer receives the unexpected PauseExecution from upstream and hits a hard invariant assertion, crashing mongod.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mongodb | mongodb | 7.0.0 ≤ 𝑥 < 7.0.35 |
| mongodb | mongodb | 8.0.0 ≤ 𝑥 < 8.0.10 |
| mongodb | mongodb | 8.2.0 ≤ 𝑥 < 8.2.10 |
| mongodb | mongodb | 8.3.0 ≤ 𝑥 < 8.3.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration