CVE-2026-13065: MongoDB $linearFill Window Function Improper Input Validation Leading to Process Termination
A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a specific sortBy expression type to cause the mongod process to terminate abnormally, resulting in denial of service. The issue stems from insufficient validation of sort specifications during execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-13065?
The severity of CVE-2026-13065 is rated medium with a score of 6.5.
How do I fix CVE-2026-13065?
To mitigate CVE-2026-13065, ensure that proper input validation is implemented for aggregation pipelines using the $linearFill window function.
What is the risk associated with CVE-2026-13065?
CVE-2026-13065 poses a risk level of 38, indicating potential for denial of service due to process termination.
What causes the issue in CVE-2026-13065?
CVE-2026-13065 is caused by improper input validation of the sortBy expression type in the $linearFill window function.
Can CVE-2026-13065 be exploited by a user with read-only privileges?
Yes, a user with read-only privileges can exploit CVE-2026-13065 to create an aggregation pipeline that may terminate the mongod process.