CVE-2026-4147

Publication date

2026-03-17 15:50:21

Family

mongodb

State

PUBLISHED

Description

An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command.