Inserting special large documents into a MongoDB replica set can cause secondary members to fail fetching the oplog from the primary, which stalls replication and may lead to a server crash. The result is a denial‑of‑service condition that can make the affected MongoDB instance unavailable.

MongoDB Inc. MongoDB Server is affected. No specific version information is provided, so all installations may potentially be vulnerable until further details are released.

The CVSS score of 7.1 indicates moderate to high severity, while the EPSS score of less than 1% suggests a low likelihood of exploitation in the wild. The vulnerability is not listed in CISA’s KEV catalog. Based on the description, the likely attack vector is the transmission of unusually large documents to a secondary node in a replica set, which requires that the attacker can write data to the database and that the replica set configuration does not restrict document size.