CVE-2025-13643: MongoDB Server may allow queries to be terminated by unauthorized users
A user with access to the cluster with a limited set of privilege actions may be able to terminate queries that are being executed by other users. This may cause a denial of service by preventing a fraction of queries from successfully completing. This issue affects MongoDB Server v7.0 versions prior to 7.0.26 and MongoDB Server v8.0 versions prior to 8.0.14
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13643?
The severity of CVE-2025-13643 is classified as high due to its potential to cause denial of service by terminating queries.
How do I fix CVE-2025-13643?
To fix CVE-2025-13643, upgrade your MongoDB Server to version 7.0.26 or 8.0.14 or later.
What versions of MongoDB Server are affected by CVE-2025-13643?
CVE-2025-13643 affects MongoDB Server versions prior to 7.0.26 and 8.0.14.
What impact does CVE-2025-13643 have on system performance?
CVE-2025-13643 can significantly impact system performance by causing some queries to fail to complete, leading to a denial of service.
Who can exploit CVE-2025-13643?
A user with limited privilege actions in the MongoDB cluster can exploit CVE-2025-13643 to terminate other users' queries.