This vulnerability (CWE-770) in MongoDB Server involves allocation of resources without limits or throttling. An unauthenticated remote client can exploit the awaitable hello command in exhaust mode by sending a crafted parameter combination that causes the server to enter a response loop. This loop bypasses normal throttling controls, resulting in excessive CPU usage and potential degradation of server availability. The affected versions explicitly include 7.0, 8.0, 8.2.0, and 8.3.0. No official patch or remediation level has been published yet, and no known exploits are reported in the wild as of the publication date.

The vulnerability allows unauthenticated remote attackers to cause excessive CPU consumption on affected MongoDB servers, potentially degrading server availability and impacting service reliability. This can be achieved with a small number of connections due to bypassing of throttling mechanisms. There is no indication of data compromise or privilege escalation from the provided information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, administrators should monitor MongoDB server usage patterns and consider implementing network-level protections such as rate limiting or firewall rules to restrict access to the awaitable hello command if possible. Avoid exposing MongoDB servers directly to untrusted networks until a fix is available.