CVE-2025-13643: MongoDB

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A user with access to the cluster with a limited set of privilege actions may be able to terminate queries that are being executed by other users. This may cause a denial of service by preventing a fraction of queries from successfully completing. This issue affects MongoDB Server v7.0 versions prior to 7.0.26 and MongoDB Server v8.0 versions prior to 8.0.14

Affected products

• MongoDB MongoDB: from 7.0.0, before 7.0.26 (fixed in 7.0.26); from 8.0.0, before 8.0.14 (fixed in 8.0.14); version 8.2.0 only

Published 2025-11-25. Last modified 2026-06-17.