NetSight
medium6.5

CVE-2026-9747

Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server.

Impact

Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server.

Affected products

VendorProductAffected versions
MongodbMongodb
from 7.0.0 before 7.0.35
from 8.0.0 before 8.0.24
from 8.2.0 before 8.2.10
from 8.3.0 before 8.3.3

Weakness classification

References