An authorized user can cause MongoDB Server to crash by executing a query that references a 2dsphere index on a field containing a GeoJSON GeometryCollection with a strict‑winding Polygon. The component that should reject unsupported strict‑winding polygons does not inspect the individual members of a GeometryCollection, so the system reaches an improbable code path that dereferences a null pointer. The crash results in a denial of service because the server becomes unavailable to legitimate requests.

MongoDB Server. No specific versions were listed, so the vulnerability may be present in any release that implements 2dsphere indexing and does not apply the guard to GeometryCollection members. Check the MongoDB changelog for the fix.

The vulnerability has a CVSS score of 7.1 and an EPSS score is not disclosed, but it is not currently listed in CISA KEV. It can be exploited only by an authenticated user who can submit queries, indicating a moderate likelihood in internal or compromised environments. The crash can be triggered with a single query, so the impact is immediate once the guard bypass is exercised.