CVE-2026-82056 in MongoDB
Tóm tắt
Bởi MITRE • 08/09/2026
A race condition in MongoDB server's text index query parsing can cause a heap use-after-free read when handling upsert retry paths. Under certain concurrent index lifecycle operations, a raw pointer to internal text index metadata may be dereferenced after the underlying structures have been freed, leading to a server crash. An authenticated user with readWrite privileges can trigger this condition through specific concurrent text-search and index management operations, resulting in denial of service for all connected clients. This
If you want to get best quality of vulnerability data, you may have to visit VulDB.