CVE-2025-7259 - Certain Queries with Duplicate _id Fields May Cause MongoDB Server to Crash · CoreCVE

Back Back to CVE browser

MEDIUM

Certain Queries with Duplicate _id Fields May Cause MongoDB Server to Crash

Published Jul 7, 2025

6.5

MEDIUM

CVSS 3.1

EPSS 0.31%

Description

An authorized user can issue queries with duplicate _id fields, that leads to unexpected behavior in MongoDB Server, which may result to crash. This issue can only be triggered by authorized users and cause Denial of Service. This issue affects MongoDB Server v8.1 version 8.1.0.

Affected products

Vendor MongoDB Inc Product MongoDB Server Default
unaffected
- Version
  8.1
  Status
  affected
  Constraints
  <=8.1.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
8.1	affected	<=8.1.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-843

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-20271
Advisory
https://jira.mongodb.org/browse/SERVER-102693
Issue TrackingVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-20271		Advisory
https://jira.mongodb.org/browse/SERVER-102693		Issue TrackingVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mongodb

Published Jul 7, 2025

Updated Jul 7, 2025

Reserved Jul 7, 2025

Link CVE-2025-7259

CISA Vulnrichment

Updated Jul 7, 2025

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-7259

Severity n/a

Public date n/a

Links CVE-2025-7259

Assigner mongodb

Published Jul 7, 2025

Updated Jul 7, 2025

Exploited since n/a

Link EUVD-2025-20271

EUVD-2025-20271