Medium · 6.5 CVE-2026-1850 EUVD-2026-6754GHSA-v4j3-xhwp-3v3w

An authorized user may disable the MongoDB server by issuing a certain type of complex query due to boolean expression simplification

Published Feb 10, 2026 · Updated Feb 10, 2026 · Assigned by mongodb

Description

Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash.

Vendor	Product	Affected	Fixed
MongoDB	MongoDB Server	8.0 – < 8.0.18, 8.2 – < 8.2.4	8.0.18