Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-25612

Internal ResourceId collision may affect unrelated collections

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
mongodb

Description

The internal locking mechanism of the MongoDB server uses an internal encoding of the resources in order to choose what lock to take. Collections may inadvertently collide with one another in this representation causing unavailability between them due to conflicting locks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MongoDB Inc MongoDB Server

Default version status: unaffected

  • 8.2 to < 8.2.4affected
  • 8.0 to < 8.0.18affected
  • 7.0 to < 7.0.29affected

References