MongoDB Server contains a high-severity flaw tracked as CVE-2026-118383 with a 9.5 CVSS rating.
An unauthenticated attacker can trigger a server crash under specific conditions involving lagging replica sets and primary catch-up cleanup.
MongoDB discovered the issue internally and released patched versions.
Cloud-managed clusters receive automatic updates, while self-managed deployments require manual patching across…