CVE-2024-8305: MongoDB

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

prepareUnique index may cause secondaries to crash due to incorrect enforcement of index constraints on secondaries, where in extreme cases may cause multiple secondaries crashing leading to no primaries. This issue affects MongoDB Server v6.0 versions prior to 6.0.17, MongoDB Server v7.0 versions prior to 7.0.13 and MongoDB Server v7.3 versions prior to 7.3.4

Affected products

• MongoDB MongoDB: from 6.0.0, before 6.0.17 (fixed in 6.0.17); from 7.0.0, before 7.0.13 (fixed in 7.0.13); from 7.3.0, before 7.3.4 (fixed in 7.3.4)

Published 2024-10-21. Last modified 2026-06-17.