CVE-2026-13058: Transaction Command Insufficient Input Validation Leading to Process Termination
An authenticated user with basic write privileges can cause the mongod process to terminate abnormally by sending a crafted transaction command with an incomplete set of required fields. The issue stems from inconsistent validation across related transaction command parameters, resulting in a fatal internal invariant failure and denial of service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-13058?
CVE-2026-13058 has a risk score of 33, indicating a moderate severity level.
How do I fix CVE-2026-13058?
To fix CVE-2026-13058, ensure that your MongoDB instance is updated to the latest version that addresses this input validation issue.
What systems are affected by CVE-2026-13058?
CVE-2026-13058 affects MongoDB's mongod process when it receives crafted transaction commands with insufficient input validation.
What is the impact of CVE-2026-13058?
The impact of CVE-2026-13058 includes the potential for an authenticated user to terminate the mongod process abnormally.
Who can exploit CVE-2026-13058?
CVE-2026-13058 can be exploited by authenticated users with basic write privileges.