CVE-2026-13076
Received Received - Intake

Memory Exhaustion in MongoDB Aggregation Framework

Publication date: 2026-07-22

Last updated on: 2026-07-22

Assigner: MongoDB, Inc.

Description
An authenticated user can cause a {{mongod}} process to be terminated by the operating system under memory pressure by performing a specific data type conversion operation within MongoDB's aggregation framework. The behavior stems from disproportionate memory consumption during this operation, and requires both write access to the database and the ability to run aggregation queries.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-22
Last Modified
2026-07-22
Generated
2026-07-23
AI Q&A
2026-07-22
EPSS Evaluated
N/A
NVD
CVE-2026-13076
EUVD
EUVD-2026-47785

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
mongodb mongodb *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows an authenticated user with write access and aggregation query permissions to cause the mongod process to terminate by exploiting high memory consumption during a specific data type conversion in MongoDB's aggregation framework.

Detection Guidance

Detecting this vulnerability requires monitoring for abnormal memory usage or process termination during aggregation operations in MongoDB. Check MongoDB logs for errors related to memory pressure or process termination. Use system monitoring tools like 'top', 'htop', or 'ps' to observe mongod process behavior under load. Enable MongoDB profiling to log slow operations that may indicate excessive memory consumption.

Impact Analysis

An attacker could disrupt database operations by crashing the mongod process, leading to service unavailability and potential data access issues for legitimate users.

Mitigation Strategies

Apply the latest MongoDB security patch immediately. Restrict database write access to trusted users only. Limit aggregation query complexity and enforce resource limits. Monitor system memory usage closely and consider increasing available memory for mongod processes. Disable unnecessary aggregation operations if they are not critical to operations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-13076. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart