CVE-2026-96297 | MongoDB up to 7.0.44/8.0.33/8.3.12/9.0.1 Aggregation Feature use after free

October 13, 2026 Yanac

A vulnerability labeled as critical has been found in MongoDB up to 7.0.44/8.0.33/8.3.12/9.0.1. Affected by this issue is some unknown functionality of the component Aggregation Feature. Such manipulation leads to use after free.

This vulnerability is referenced as CVE-2026-96297. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More