CVE-2026-8202mediumCWE-770

CVE-2026-8202: medium-severity vulnerability in MongoDB Server

Post-authentication CPU utilization DoS via $trim/$ltrim/$rtrim operators

Published

Follow this CVE+ Monitor MongoDB Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.3%
Using a densely populated chars mask and a large input string in the MongoDB aggregation operators $trim, $ltrim, and $rtrim, an authenticated user with aggregation permissions can pin CPU utilization at 100% for an extended period of time. This issue impacts MongoDB Server v7.0 versions prior to 7.0.34, v8.0 versions prior to 8.0.23, v8.2 versions prior to 8.2.9 and v8.3 versions prior to 8.3.2.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Affected products
MongoDB, Inc. · MongoDB Server
Related CVEs — MongoDB Server

In the same product, most dangerous first.

CVE-2026-8053HIGHFlatBSON Duplicate Field Index DriftEPSS 0.7%CVE-2026-8199HIGHPost-auth memory exhaustion via bitwise match expressionsEPSS 0.3%CVE-2026-8336HIGHPost-authentication use-after-free error in $_internalJsEmit and mapreduce commandsEPSS 0.3%CVE-2026-8843HIGHCalling createIndex with certain index types can crash mongodEPSS 0.2%CVE-2026-8200MEDIUMSchema validation log messages may not redact user dataEPSS 0.2%CVE-2026-8201MEDIUMUse-After-Free in MongoDB FLE Query Analysis When Processing Positional Projections on Encrypted FieldsEPSS 0.1%