Medium severity4.3NVD Advisory· Published May 13, 2026· Updated Jun 17, 2026
CVE-2026-8202
CVE-2026-8202
Description
Using a densely populated chars mask and a large input string in the MongoDB aggregation operators $trim, $ltrim, and $rtrim, an authenticated user with aggregation permissions can pin CPU utilization at 100% for an extended period of time.
This issue impacts MongoDB Server v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <7.0.34, <8.0.23, <8.2.9, <8.3.2
Patches
Vulnerability mechanics
References
1- jira.mongodb.org/browse/SERVER-120668nvdIssue TrackingVendor Advisory
News mentions
0No linked articles in our index yet.