NetSight
medium6.5

CVE-2026-25610

An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints.

Impact

An authorized user may trigger a server crash by running a $geoNear pipeline with certain invalid index hints.

Affected products

VendorProductAffected versions
MongodbMongodb
from 7.0.0 before 7.0.29
from 8.0.0 before 8.0.13

Weakness classification

References