An authenticated user can cause excessive CPU consumption or out-of-memory conditions on a MongoDB server by sending a crafted Queryable Encryption… (CVE-2026-13069)
An authenticated user can exploit a vulnerability in MongoDB's Queryable Encryption feature by sending a specially crafted find payload that includes an unvalidated field controlling an internal computation loop. This can cause excessive CPU usage or out-of-memory conditions, leading to resource exhaustion and degraded availability of the MongoDB server for other operations.
AI Analysis
Technical Summary
This vulnerability (CVE-2026-13069) affects MongoDB servers where an authenticated user can send a crafted Queryable Encryption find payload containing an unvalidated field that controls an internal computation loop. This flaw allows the attacker to cause excessive CPU consumption or out-of-memory conditions, resulting in resource exhaustion that degrades the availability of the server. The issue is classified under CWE-770 (Allocation of Resources Without Limits or Throttling). No patch or official remediation information is currently provided, and no known exploits are reported in the wild.
Potential Impact
Successful exploitation leads to denial of service conditions by exhausting CPU and memory resources on the MongoDB server. This degrades availability and can disrupt normal database operations for legitimate users. The impact is limited to authenticated users who can send crafted queries.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict authenticated user privileges to trusted users only and monitor for unusual resource consumption patterns related to Queryable Encryption queries.
An authenticated user can cause excessive CPU consumption or out-of-memory conditions on a MongoDB server by sending a crafted Queryable Encryption… (CVE-2026-13069)
Description
An authenticated user can exploit a vulnerability in MongoDB's Queryable Encryption feature by sending a specially crafted find payload that includes an unvalidated field controlling an internal computation loop. This can cause excessive CPU usage or out-of-memory conditions, leading to resource exhaustion and degraded availability of the MongoDB server for other operations.
CVSS v4.0
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2026-13069) affects MongoDB servers where an authenticated user can send a crafted Queryable Encryption find payload containing an unvalidated field that controls an internal computation loop. This flaw allows the attacker to cause excessive CPU consumption or out-of-memory conditions, resulting in resource exhaustion that degrades the availability of the server. The issue is classified under CWE-770 (Allocation of Resources Without Limits or Throttling). No patch or official remediation information is currently provided, and no known exploits are reported in the wild.
Potential Impact
Successful exploitation leads to denial of service conditions by exhausting CPU and memory resources on the MongoDB server. This degrades availability and can disrupt normal database operations for legitimate users. The impact is limited to authenticated users who can send crafted queries.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict authenticated user privileges to trusted users only and monitor for unusual resource consumption patterns related to Queryable Encryption queries.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-3hrm-h2m4-hcr8
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-13069"]
- Ecosystems
- []
- Database Specific Severity
- HIGH
- Cvss Version
- 4.0
Threat ID: 6a6150de9c2644c7f8da1497
Added to database: 07/22/2026, 23:23:10 UTC
Last enriched: 07/22/2026, 23:34:35 UTC
Last updated: 07/23/2026, 02:51:54 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.