CVE-2026-13063 is a vulnerability in MongoDB where an authenticated user with standard read/write privileges can exploit insufficient validation in the libmongocrypt library. By sending a specially crafted aggregation command, the attacker can cause the mongod process to allocate excessive memory, resulting in an out-of-memory condition and process termination. This vulnerability is categorized under CWE-190 (Integer Overflow or Wraparound). No patch or official remediation information is currently provided, and no known exploits are reported in the wild.

The impact is a denial of service condition where the mongod process terminates due to out-of-memory triggered by crafted aggregation commands. This can disrupt database availability but does not indicate data breach or privilege escalation based on the available information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to trusted users only and monitor for unusual aggregation command usage patterns.