CVE-2026-130729.2CriticalCWE-122
MongoDB Improper Input Validation in Compute Mode External Data Processing Leading to Memory Corruption
MongoDB · MongoDB Server
Not in CISA KEVVendor fix available
0.4%probability of exploitation in the next 30 days
34th percentile
050100
Higher than 34% of scored CVEs
9.2CriticalCVSS 4.0
LowMediumHighCrit.
DescriptionNVD
When compute mode is enabled on a standalone mongod instance, insufficient validation of externally sourced BSON data during aggregation pipeline processing can result in memory corruption, potentially leading to process termination or other unintended behavior. This configuration is non-default and requires explicit enablement at startup.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 30 Jul.
- MongoDB patches critical flaw amid 27 new security vulnerabilitiesSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.