CVEFinder.io

CVE-2026-89099

⚠️ high
Summary

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this condition over the normal client protocol, resulting in server termination and potential corruption of process memory with user-influenced content. Successful use of this issue may impact the confidential

Description

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this condition over the normal client protocol, resulting in server termination and potential corruption of process memory with user-influenced content. Successful use of this issue may impact the confidentiality, integrity, and availability of the affected server process.

CVSS Score
7.5
High
EPSS Score
0.3
Exploit Probability
Published Date
2026-09-11
First Seen: 2026-09-12
📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 67.8% of all 365,890 vulnerabilities in our database.

#117,965
Above average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Sep 11, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2026-09-29
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Vector 4.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE IDs (Weakness Types)
CWE-362

📦 Affected Products 5

Vendor Product Status Affected Versions
mongodb mongodb Affected
> 7.0.0 < 7.0.43
mongodb mongodb Affected
> 8.0.0 < 8.0.32
mongodb mongodb Affected
> 8.3.0 < 8.3.11
mongodb mongodb Affected
v9.0.0
mongodb mongodb Affected
v9.1.0

🔗 References 1

https://jira.mongodb.org/browse/SERVER-134063
Vendor Advisory Issue Tracking

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-82052 🔶 medium 6.5 0.4 The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a Mon... 2026-09-08
CVE-2026-82053 ⚠️ high 8.1 0.2 A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authe... 2026-09-08
CVE-2026-82054 🔶 medium 6.5 0.3 A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a ... 2026-09-08
CVE-2026-82055 🔶 medium 6.5 0.3 A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer d... 2026-09-08
CVE-2026-82056 🔶 medium 5.3 0.3 A race condition in MongoDB server's text index query parsing can cause a heap use-after-free read when handling upsert ... 2026-09-08
CVE-2026-82057 🔶 medium 6.5 0.3 A security issue was discovered in MongoDB where an authenticated user with readWrite privileges could crash the mongod ... 2026-09-08
These CVEs affect the same products