CVE-2025-7259

MEDIUM

MongoDB 8.1.0 - Authenticated Denial of Service via Duplicate _id Query

Title source: llm

Description

An authorized user can issue queries with duplicate _id fields, that leads to unexpected behavior in MongoDB Server, which may result to crash. This issue can only be triggered by authorized users and cause Denial of Service. This issue affects MongoDB Server v8.1 version 8.1.0.

References (1)

Core 1

Core References

Issue Tracking, Vendor Advisory

https://jira.mongodb.org/browse/SERVER-102693

Scores

CVSS v3 6.5

EPSS 0.0028

EPSS Percentile 19.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-843

Status published

Products (1)

mongodb/mongodb 8.1.0

Published Jul 07, 2025

Tracked Since Feb 18, 2026