Description
A use-after-free in the aggregation framework of MongoDB Server can occur when certain expressions are evaluated in an aggregation sub-pipeline. The condition can be caused by an authenticated user with read privileges, and may result in the server terminating unexpectedly.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MongoDB | MongoDB Server | 9.0.0 – < 9.0.7 | 9.0.7 |
Advisories 1
- WID-SEC-2026-4468 MongoDB: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 10, 2026