What is CVE-2025-6712?

CVE-2025-6712 is a medium-severity vulnerability in Mongodb, classified under Uncontrolled Resource Consumption. CVSS score: 6.5/10. Published 2025-07-07.

How severe is CVE-2025-6712?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Resource exhaustion in Mongodb

CVE-2025-6712

MongoDB Server may be susceptible to disruption caused by high memory usage, potentially leading to server crash. This condition is linked to inefficiencies in memory management related to internal operations. In scenarios where certain internal processes persist longer than anticipated, memory consumption can increase, potentially impacting server stability and availability. This issue affects MongoDB Server v8.0 versions prior to 8.0.10

Vulnerability class: DoS (Denial of Service)

EPSS: 0.003 (20.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Mongodb
Mongodb Inc Server — versions 8.0

Weakness classification (CWE)

CWE-400 — Uncontrolled Resource Consumption

References

cna@mongodb.com (Issue Tracking, Vendor Advisory)

Frequently asked questions

What is CVE-2025-6712?: CVE-2025-6712 is a medium-severity vulnerability in Mongodb, classified under Uncontrolled Resource Consumption. CVSS score: 6.5/10. Published 2025-07-07.
How severe is CVE-2025-6712?: Medium severity. CVSS v3 base score is 6.5 out of 10.