Security Advisory

CVE-2026-13075

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-22 19:13:04
Last updated 2026-07-23 14:19:39
Assigner mongodb
CVSS score 7.1
State PUBLISHED

Description

An authenticated user can cause the mongod process to be terminated by the operating system under memory pressure via the $rankFusion and $scoreFusion aggregation stages. The issue originates in the server's error-handling path and requires the ability to run aggregation queries.