VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jul 7, 2025· Updated Jun 17, 2026

CVE-2025-7259

CVE-2025-7259

Description

An authorized user can issue queries with duplicate _id fields, that leads to unexpected behavior in MongoDB Server, which may result to crash. This issue can only be triggered by authorized users and cause Denial of Service. This issue affects MongoDB Server v8.1 version 8.1.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • MongoDB/MongoDBv52 versions
    cpe:2.3:a:mongodb:mongodb:8.1.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:mongodb:mongodb:8.1.0:*:*:*:*:*:*:*range: 8.1
    • cpe:2.3:a:mongodb:mongodb:8.1.0:*:*:*:-:*:*:*
  • MongoDB/Serverllm-fuzzy
    Range: =8.1.0
  • osv-coords
    pkg:bitnami/mongodb
    Range: >= 8.1.0, < 8.2.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.