CVE 7.1 HIGH

Invalid $geoNear index hint may cause server crash_CVE-2026-25610

7.1 / 10
HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Description

An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints.

Basic Information

ID CVE-2026-25610
Source mongodb
Published Feb 10, 2026 at 18:30

Affected Product

Vendor MongoDB Inc
Product MongoDB Server
Version 8.0
Affected Versions MongoDB Inc MongoDB Server 8.0
MongoDB Inc MongoDB Server 7.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.