CyberRota Analysis
AI-GeneratedAuthenticated users of MongoDB are vulnerable to a denial-of-service condition due to the `$_internalIndexKey` aggregation expression, which can crash the server when processing compound wildcard index specifications. This vulnerability can be exploited by any user with the ability to execute aggregation pipelines, potentially disrupting service availability. Organizations using MongoDB should prioritize remediation to prevent potential service interruptions.
Original NVD Description
The `$_internalIndexKey` aggregation expression can be used by any authenticated user to crash a MongoDB server (mongod). The expression fails to handle compound wildcard index specifications, triggering an internal consistency check that aborts the server process. The user must be able to run an aggregation pipeline.
Related CVEs
Other vulnerabilities affecting the same vendor(s)