This vulnerability involves a reachable assertion failure in MongoDB Server when a "2dsphere_bucket" index is created on a non-timeseries bucket collection or when "queryable_encrypted_range" indices are created. Although index creation succeeds, any subsequent document insertion that updates the index causes the server to crash. Affected versions include MongoDB Server 7.0 prior to 7.0.32, 8.0 prior to 8.0.21, and 8.2 prior to 8.2.6. The CVSS 4.0 base score is 7.1, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on availability.

Successful exploitation results in a denial of service due to server crashes triggered by document insertions that update the affected indices. This impacts availability of the MongoDB Server instance. There is no indication of data confidentiality or integrity compromise from the provided information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should avoid creating "2dsphere_bucket" indexes on non-timeseries bucket collections and "queryable_encrypted_range" indices until a fix is confirmed. Monitor MongoDB's official advisories for updates and apply patches once available.