CyberRota Analysis
AI-GeneratedMongoDB servers are vulnerable to a race condition in the text index query parsing, which can lead to a heap use-after-free read and potentially crash the server during concurrent index lifecycle operations. This issue can be exploited by authenticated users with readWrite privileges, resulting in denial of service for all connected clients. Organizations using MongoDB should prioritize this vulnerability to mitigate potential disruptions in service.
Original NVD Description
A race condition in MongoDB server's text index query parsing can cause a heap use-after-free read when handling upsert retry paths. Under certain concurrent index lifecycle operations, a raw pointer to internal text index metadata may be dereferenced after the underlying structures have been freed, leading to a server crash. An authenticated user with readWrite privileges can trigger this condition through specific concurrent text-search and index management operations, resulting in denial of service for all connected clients. This
Related CVEs
Other vulnerabilities affecting the same vendor(s)