CVE-2026-13065

Analyzed Analyzed - Analysis Complete

MongoDB Denial of Service via $linearFill Operator

Publication date: 2026-07-22

Last updated on: 2026-08-05

Assigner: MongoDB, Inc.

Description

A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a specific sortBy expression type to cause the mongod process to terminate abnormally, resulting in denial of service. The issue stems from insufficient validation of sort specifications during execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-22

Last Modified

2026-08-05

Generated

2026-08-12

AI Q&A

2026-07-22

EPSS Evaluated

2026-08-10

NVD

CVE-2026-13065

EUVD

EUVD-2026-47796

Affected Vendors & Products

Vendor	Product	Version / Range
mongodb	mongodb	From 7.0.0 (inc) to 7.0.39 (exc)
mongodb	mongodb	From 8.0.0 (inc) to 8.0.28 (exc)
mongodb	mongodb	From 8.2.0 (inc) to 8.2.12 (exc)
mongodb	mongodb	From 8.3.0 (inc) to 8.3.7 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability allows a user with read-only access to craft a malicious aggregation pipeline using the $linearFill window function operator with a specific sortBy expression. This causes the MongoDB server process to crash abnormally, leading to a denial of service condition.

Detection Guidance

This vulnerability involves exploitation through MongoDB's aggregation pipeline using the $linearFill operator with a specific sortBy expression. Detection requires checking MongoDB logs for abnormal aggregation queries or process terminations. Monitor for mongod crashes or unusual query patterns involving $linearFill. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability can cause your MongoDB server to crash, disrupting database operations and making the system unavailable for all users. It requires only read-only privileges, increasing the risk of unauthorized impact.

Compliance Impact

This vulnerability causes denial of service by allowing unauthorized process termination, which could disrupt data availability. For GDPR, this may impact data integrity and availability requirements under Article 32. For HIPAA, it could affect access controls and availability of protected health information under the Security Rule.

Mitigation Strategies

Update MongoDB to the latest patched version immediately to address the insufficient validation of sort specifications during aggregation pipeline execution.

Hi! I’m here to help you understand CVE-2026-13065. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70