Impact
The issue involves the $_internalConvertBucketIndexStats stage, which incorrectly uses PauseExecution to signal a document skip. PauseExecution is a TeeBuffer-internal signal meant only for $facet coordination. When $_internalConvertBucketIndexStats precedes $facet in a pipeline and no timeseries input is present, TeeBuffer receives an unexpected PauseExecution, triggering a hard invariant assertion that crashes the mongod process. The crash results in a denial of service condition on the affected database server, potentially interrupting all client connections and impacting data availability.
Affected Systems
MongoDB Server is listed as the affected product. No specific version range is provided in the available data, so the vulnerability may affect all current releases of the server until an official patch is issued.
Risk and Exploitability
The CVSS score of 7.1 indicates high severity. EPSS data is not available, so the exploitation likelihood cannot be quantified. The vulnerability is not listed in the CISA KEV catalog. The description does not state the attack vector or attacker privileges necessary to trigger the crash, but it is inferred that any user who can submit aggregation pipelines containing the problematic stage might cause a denial of service. The primary impact is availability loss of the mongod service.
OpenCVE Enrichment