Buffer overflow in MongoDB Server

CVE-2026-82071

Insufficient validation of storage engine configuration options in MongoDB Server allows an authenticated user with write privileges to supply crafted parameters during collection creation that override internal storage metadata. This results in an out-of-bounds memory write in the server process, causing a denial of service via server crash, with potential for further impact including arbitrary code execution.

Vulnerability class: Buffer Overflow

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-82071?
CVE-2026-82071 is a high-severity vulnerability in MongoDB Server, classified under Out-of-bounds Write. CVSS score: 8.1/10. Published 2026-09-08.
How severe is CVE-2026-82071?
High severity. CVSS v3 base score is 8.1 out of 10.