CVE-2026-104004: MongoDB Server

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is later inserted. The behavior can occur for authenticated users with write access.

Affected products

• MongoDB MongoDB Server: from 8.3.0, before 8.3.13 (fixed in 8.3.13); from 8.0, before 8.0.34 (fixed in 8.0.34); from 9.0, before 9.0.4 (fixed in 9.0.4)

Published 2026-10-13. Last modified 2026-10-15.