CVE-2026-1850: An authorized user may disable the MongoDB server by issuing a certain type of complex query due to boolean expression simplification
Complex queries can cause excessive memory usage in MongoDB Query Planner resulting in an Out-Of-Memory Crash.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1850?
CVE-2026-1850 is classified as a high-severity vulnerability due to its potential to allow an authorized user to disable the MongoDB server.
How do I fix CVE-2026-1850?
To fix CVE-2026-1850, ensure you are using the latest version of MongoDB that includes security patches addressing this vulnerability.
Who is affected by CVE-2026-1850?
CVR-2026-1850 affects authorized users of MongoDB who can execute complex queries.
What type of issues can CVE-2026-1850 cause?
CVE-2026-1850 can lead to excessive memory usage in the MongoDB Query Planner, potentially resulting in an Out-Of-Memory crash.
Is CVE-2026-1850 a coding issue?
CVE-2026-1850 arises from the handling of boolean expressions in complex queries, making it a design and implementation issue within the MongoDB Query Planner.