VYPR
Unrated severityNVD Advisory· Published Jul 22, 2026· Updated Jul 23, 2026

MongoDB $jsonSchema Query Operator Excessive CPU Consumption Leading to Denial of Service

CVE-2026-13064

Description

Certain query operations involving deeply nested $jsonSchema constructs can trigger disproportionate CPU consumption in affected MongoDB deployments, potentially leading to resource exhaustion. The resulting CPU-bound operation cannot be interrupted through standard administrative controls.

Affected products

1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.

CVE-2026-13064 · VYPR