CVE-2026-1850
An authorized user may disable the MongoDB server by issuing a certain type of complex query due to boolean expression simplification
Summary
An authorized user may disable the MongoDB server by issuing a certain type of complex query due to boolean expression simplification
Original description
The description as published by the source.
Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash.
Affected packages
Bitnami
mongodb
[{"type":"SEMVER","events":[{"introduced":"8.0.0"},{"fixed":"8.0.18"},{"introduced":"8.2.0"},{"fixed":"8.2.4"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- web jira.mongodb.org