Authentication with read access can trigger the mongod process to terminate when certain aggregation expressions that execute server‑side JavaScript are run. The flaw is caused by improper memory handling during document processing, leading to a memory safety issue (CWE‑416).

MongoDB Server is affected. This vulnerability applies to any version of the server that includes the aggregation framework with server‑side JavaScript support for authenticated read users; no specific version numbers are listed.

The CVSS score of 7.1 indicates a medium to high severity. The EPSS score of less than 1% points to a very low probability of exploitation. This vulnerability is not listed in CISA KEV. An attacker who has authenticated read access can craft aggregation pipelines that trigger the memory handling flaw, causing the mongod process to crash and resulting in a denial of service. No publicly documented exploit is known, but the impact is significant if the attacker can execute the required aggregation expressions.