CVE-2026-13071 — Server-Side JavaScript Aggregation Expression Memory Safety Issue Leading to Process Termination
An authenticated user with read access can cause the mongod process to be terminated through certain aggregation expressions that execute server-side JavaScript. The issue invol…
Published: 2026-07-22 · CVSS: 7.1 · CVSS 4.0
An authenticated user with read access can cause the mongod process to be terminated through certain aggregation expressions that execute server-side JavaScript. The issue involves improper memory handling during document processing.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7