CVE-2026-4358 - Memory safety issues in slot-based execution hash table spill

Back Back to CVE browser

MEDIUM

Memory safety issues in slot-based execution hash table spill

Published Mar 17, 2026

6.1

MEDIUM

CVSS 4.0

EPSS 0.36%

Description

A specially crafted aggregation query with $lookup by an authenticated user with write privileges can cause a double-free or use-after-free memory issue in the slot-based execution (SBE) engine when an in-memory hash table is spilled to disk.

Affected products

Vendor MongoDB Inc Product MongoDB Server Default
unaffected
Affected
- ≥ 7.0, < 7.0.31
- ≥ 8.0, < 8.0.20
- ≥ 8.2, < 8.2.6

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
MongoDB Inc	MongoDB Server	unaffected	Affected ≥ 7.0, < 7.0.31 ≥ 8.0, < 8.0.20 ≥ 8.2, < 8.2.6

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-415

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-12639
Advisory
https://jira.mongodb.org/browse/SERVER-118849
ExploitVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-12639		Advisory
https://jira.mongodb.org/browse/SERVER-118849		ExploitVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mongodb

Published Mar 17, 2026

Updated Mar 17, 2026

Reserved Mar 17, 2026

Link CVE-2026-4358

CISA Vulnrichment

Updated Mar 17, 2026

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2026-4358

Red Hat

No data

ENISA EUVD

Assigner mongodb

Published Mar 17, 2026

Updated Mar 17, 2026

Link EUVD-2026-12639

GitHub

No data