CVE-2025-7259: fallo de gravedad media en MongoDB Server
Certain Queries with Duplicate _id Fields May Cause MongoDB Server to Crash
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.5epss 0.3%
An authorized user can issue queries with duplicate _id fields, that leads to unexpected behavior in MongoDB Server, which may result to crash. This issue can only be triggered by authorized users and cause Denial of Service. This issue affects MongoDB Server v8.1 version 8.1.0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Productos afectados
MongoDB Inc · MongoDB ServerCVEs relacionadas — MongoDB Server
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-25611HIGHPre-Authentication Memory Exhaustion Denial of Service in MongoDB ServerEPSS 0.9%CVE-2025-0755HIGHMongoDB C Driver bson library may be susceptible to buffer overflowEPSS 0.8%CVE-2024-8305MEDIUMMongoDB Server secondaries may crash due to forced index constraintsEPSS 0.6%CVE-2024-10921MEDIUMImproper neutralization of null bytes may lead to buffer over-reads in MongoDB ServerEPSS 0.6%CVE-2024-3372HIGHMongoDB Server may have unexpected application behaviour due to invalid BSONEPSS 0.5%CVE-2025-6709HIGHPre-Authentication Denial of Service Vulnerability in MongoDB Server's OIDC AuthenticationEPSS 0.5%