CVE-2026-25612 — Internal ResourceId collision may affect unrelated collections
The internal locking mechanism of the MongoDB server uses an internal encoding of the resources in order to choose what lock to take. Collections may inadvertently collide with …
Published: 2026-02-10 · CVSS: 7.1 · CVSS 4.0
The internal locking mechanism of the MongoDB server uses an internal encoding of the resources in order to choose what lock to take. Collections may inadvertently collide with one another in this representation causing unavailability between them due to conflicting locks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7