This vulnerability (CWE-476: NULL Pointer Dereference) exists in the query planner component of MongoDB Server. An authenticated user with read privileges can exploit this flaw by sending a specially formed query targeting a collection with a text index. The flaw causes the server process to crash, resulting in a denial of service condition. The affected versions explicitly include MongoDB Server versions 7.0, 8.0, and 8.3.0. There is no vendor advisory or patch information provided, and no known exploits in the wild have been reported.

Successful exploitation causes the MongoDB Server process to terminate unexpectedly, resulting in denial of service. This affects all connected clients and any in-flight operations, potentially disrupting availability of the database service. The impact is limited to denial of service; no information indicates data corruption or privilege escalation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider restricting read-level access to trusted users and monitor for unusual query patterns targeting text indexes. No official fix or workaround has been documented at this time.