MongoDB C Driver Vulnerability Allows Denial of Service

CERT-Bund has released security advisory WID-SEC-2026-0828 concerning a critical vulnerability in the Open Source MongoDB C Driver. Versions prior to 2.2.3 and 1.30.8 are affected. The vulnerability, rated with a low CVSS Base Score of 2.0 and Temporal Score of 1.8, allows a remote, authenticated attacker to exploit the flaw to cause a Denial of Service (DoS) condition. The advisory indicates that mitigation measures are available.

Organizations utilizing MongoDB C Driver versions prior to 2.2.3 or 1.30.8 on Linux, UNIX, or Windows systems should immediately review their deployment. It is recommended to apply available mitigations or update to a patched version as soon as possible to prevent potential DoS attacks. While the CVSS scores are low, a successful DoS attack can disrupt service availability, impacting business operations.