CVE-2025-7259CWE-843

Certain Queries with Duplicate _id Fields May Cause MongoDB Server to Crash

Medium · published July 7, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
27.1
In the wild
Unconfirmed
What it is

An authorized user can issue queries with duplicate _id fields, that leads to unexpected behavior in MongoDB Server, which may result to crash. This issue can only be triggered by authorized users and cause Denial of Service. This issue affects MongoDB Server v8.1 version 8.1.0.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00348 · 27.1th percentile
Weakness
CWE-843 · Access of Resource Using Incompatible Type ('Type Confusion')
Published
2025-07-07T15:59Z
EPSS history
Timeline
  • 07 JUL 15:59Z
    Certain Queries with Duplicate _id Fields May Cause MongoDB Server to Crash
    cvelistv5