Medium severity6.5NVD Advisory· Published May 13, 2026· Updated Jun 17, 2026
CVE-2026-8199
CVE-2026-8199
Description
An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear. This contributes to memory pressure and may lead to availability loss by OOM.
This issue impacts MongoDB Server v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <7.0.34, <8.0.23, <8.2.9, <8.3.2
Patches
Vulnerability mechanics
References
1- jira.mongodb.org/browse/SERVER-122449nvdIssue TrackingVendor Advisory
News mentions
0No linked articles in our index yet.