Unrated severityNVD Advisory· Published Jul 22, 2026· Updated Jul 23, 2026
MongoDB $jsonSchema Query Operator Excessive CPU Consumption Leading to Denial of Service
CVE-2026-13064
Description
Certain query operations involving deeply nested $jsonSchema constructs can trigger disproportionate CPU consumption in affected MongoDB deployments, potentially leading to resource exhaustion. The resulting CPU-bound operation cannot be interrupted through standard administrative controls.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.