CVE-2026-120821
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Nov 10, 2026
Vendor
unknown
Description
A use-after-free in the aggregation framework of MongoDB Server can occur when certain expressions are evaluated in an aggregation sub-pipeline. The condition can be caused by an authenticated user with read privileges, and may result in the server terminating unexpectedly.